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Net  innovation  ™|'ayof^J>sses  have  ii,»ski"- 

gets  squeezed  WhatSneXtr 


■ECONOMY! 
ON THE  EDGE 


series 


■  BY  CAROLYN  DUFFY 
MARSAN 

Beyond  todays  layoff  news 
and  this  year’s  shrinking  net¬ 
work  budgets,  the  ongoing 
economic  turmoil  could  have 
a  long-term  impact  on  the 
lifeblood  of  the  tech¬ 
nology  industry: 
innovation. 

After  all,  lay¬ 
offs,  research 

and  develop-  . 

,  7  Last  in  a 

ment  cutbacks,  three-part 

and  a  lack  of  start¬ 
up  companies  mean 
fewer  people  are  working  to 
solve  network  problems,  and 
fewer  ideas  will  ever  see  the 
light  of  day  On  the  other  hand, 
observers  say  what  is  really 
emerging  is  a  more  Darwinian 
environment  than  we  have 
had  in  recent  years,  where 
only  the  strong  ideas  survive. 

“We  were  in  an  era  where 
almost  any  idea  could  get 
funding  ...,”says  Bill  Leighton, 
vice  president  of  network  and 
services  development  at  AT&T 
Labs.  “So  many  new  ideas 
were  generated  [that]  people 
like  myself  had  to  spend  a  lot 
of  time  sorting  it  out.” 


This,  the  final  part  of  Net¬ 
work  World’s  series  about  the 
economy’s  effects  on  the  in¬ 
dustry,  focuses  on  how  inno¬ 
vators  plan  to  make  the  most 
of  a  bad  situation. 

“It’s  inevitable  that  we’ll 
go  forward  .  .  .  with  tech¬ 
nologies  like  wire¬ 
less  Internet, 
optical  and 
mass-market 
broadband,” 
says  Larry 
Smarr,  director 
of  the  California 
Institute  for  Telecom¬ 
munications  and  Inform¬ 
ation  Technology  (CalIT2) 
and  a  member  of  President 
Bush’s  IT  advisory  council. 
“People  won’t  stop  innovat¬ 
ing,  but  it’s  going  to  be  short 
rations  for  a  while.” 

That’s  partly  because  private 
investment  in  network  start¬ 
ups  —  a  major  engine  of  inno¬ 
vation  —  evaporated  this  year. 
The  second  quarter  reported 
the  lowest  amount  of  seed- 
and  first-round  financing 
deals  in  the  industry  since 
1998,  according  to  Pricewater- 
houseCoopers’  MoneyTree 
See  Economy,  page  80 


New  CEO  Frank 
Dunn  will  take 
Nortel's  reins 
on  Nov.  1. 


Reading  Nortel’s  crystal  ball 


Financial:  When  it  announces  its  quarterly 
earnings  Oct.  18,  the  company  expects  to  see  a 
third-quarter  loss  of  $3.6  billion.  Nortel  will  have 
to  make  due  with  well  below  $4  billion  in 
quarterly  revenue  starting  next  year —  down 
from  $5  billion  outlined  previously. 

Personnel:  Nortel  will  lay  off  an  additional 
15,000  to  20,000  employees  (for  a  total  of  40,000 
to  50,000  this  year).The  company  began  the  year 
with  almost  95,000  workers. 

Technology:  While  Nortel  plans  to  focus  on 
optical,  metro  and  wireless  networks,  Nortel's 
fortunes  will  still  rely  on  carrier  spending  picking 
up.  Analysts  say  the  enterprise  business  has 
been  de-emphasized  and  any  vestiges  of  Nortel’s 
Bay  acquisition  could  be  up  for  sale.  Nortel's 
enterprise  voice  business,  mainly  PBXs,  may 
grow  as  companies  upgrade  to  packet  voice  gear. 


■  BY  JIM  DUFFY,  TIM  GREENE 
AND  PHIL  HOCHMUTH 

MISSISSAUGA,  ONTARIO  — 
When  Nortel  is  finished  with  its 
latest  round  of  layoffs,  divesti¬ 
tures,  facility  closings  and  man¬ 
agement  shakeups,  the  vendor 
will  hardly  resemble  the  com¬ 
pany  that  it  once  was. 

Nortel,  which  last  week  announ¬ 
ced  plans  to  fire  up  to  20,000 
more  people,  shutter  more  “non¬ 
core”  operations  and  replace  its 
CEO  with  its  CFO,  is  streamlining 
its  business  again  after  warning  of 
another  multibillion-dollar  quar¬ 
terly  loss.  It  will  now  focus  on 
three  areas  —  long-haul  optical, 
metropolitan  and  wireless  net¬ 
works  —  instead  of  the  five  it  tar¬ 
geted  just  three  months  ago.  Two 
IP-related  areas  having  been 
dropped  from  the  ranks. 

The  reinvention,  if  things  go  ac¬ 
cording  to  Nortel’s  plans,  would 
cut  costs,  stimulate  growth  and 


keep  the  company  alive.  But 
users  and  industry  observers  say 
the  company  is  on  a  downward 
spiral  from  which  it  may  not  be 


able  to  recover. 

“They’re  not  going  to  be 
around,”  says  Frank  Dzubeck, 

See  Nortel,  page  12 


Microsoft  boldly  bundles  again 

New  Windows  collaboration  features  heralded  but  raise  questions. 


■  BY  JOHN  FONTANA 

ORLANDO  —  Seemingly  un¬ 
bowed  by  its  antitrust  troubles, 
Microsoft  again  is  adding  tech¬ 
nology  to  its  Windows  server 
operating  system,  this  time 
focused  on  collaboration  fea-  * 
tures  for  corporations.  * 

Microsoft  said  at  its  annual  Ex-  * 
change  Conference  last  week 
that  with  the  expected  release 
of  Windows.Net  Server  early 


next  year,  it  will  add  a  set  of  col¬ 
laboration  features  called  Share- 
Point  Team  Services  to  the  base 
operating  system.  The  inclusion 
of  additional  features  most  likely 


More  online! 

•  Read  about  Microsoft's 
broad  new  security 
program. 

DocFinder:  6355 


will  send  ripples  through  the  col¬ 
laboration  software  market,  influ¬ 
ence  how  IT  executives  buy  and 
deploy  the  software,  and  invite 
more  legal  scrutiny  of  Microsoft’s 
product  bundling. 

The  SharePoint  services, 
accessed  programmatically 
through  a  set  of  APIs,  let  groups 
of  users  set  up  Web  sites  where 
they  can  share  documents,  cal¬ 
endars  and  to-do  lists  related  to 
See  Microsoft,  page  14 
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Feds  target  cyberscammer 


The  Federal  Trade  Commission  has  filed  a  complaint  in  federal  court  against  a  cyber¬ 
scammer  for  registering  common  misspellings  of  legitimate  domains,  including  41 
variations  of  pop  star  Britney  Spears’  name,  in  order  to  trap  users  into  sites  that  pro¬ 
duced  dozens  of  pop-up  ads.  The  FTC  filed  the  complaint  against  John  Zuccarini, 
who  has  conducted  business  under  a  number  of  different  company  names.  Zuc¬ 
carini  registered  more  than  5,500  domain  names  designed  to  divert  Web  surfers  from 
the  sites  they  were  trying  to  reach,  the  FTC  says.  When  users  went  to  the  sites  inad¬ 
vertently,  they  were  hit  with  a  barrage  of  pop-up  advertisements  for  pornography  and 
gambling  sites,  and  psychic  services.  The  FTC  estimates  Zuccarini  earns  between 
$800,000  and  $1  million  annually  from  the  scheme,  charging  advertisers  whose  ban¬ 
ner  ads  and  affiliate  programs  appear  on  his  site. The  FTC  will  seek  a  court  order  to 
force  the  defendant  to  give  up  his  “ill-gotten  gains.”  No  word  on  what  it  will  take  for 
that  to  happen. 


Cyber  overlord 
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Richard  Clarke 


The  Bush  administration  named  Richard  Clarke,  who  has  served 
on  the  National  Security  Council  for  more  than  a  decade,  as  the 
head  of  cybersecurity  within  the  newly  created,  Cabinet-level 
Office  of  Homeland  Security  In  his  post,  Clarke  will  work  with 
retired  Army  Gen.  Wayne  Downing  to  coordinate  intelligence  and 
military  resources  in  the  antiterrorism 
effort.  Clarke  once  warned  the  Global 
Internet  Project  that  the  U.S.  faced 
an  “electronic  Pearl  Harbor”  if  the 
nations  electronic  defenses  were  not 
strengthened.  Clarke  helped  draft  the 
nations  first  infrastructure-protection 
plan  in  1999. 


Tightening  up  the  Linux  perimeter 

The  National  Security  Agency,  the  government’s  security  arm,  with  help  from  Network 
Associates,  last  week  announced  it  has  made  a  security-enhanced  version  of  Linux 
available  for  download. The  NSA  said  it  realizes  mainstream  operating  systems  often 
lack  critical  security  features  that  could  enforce  network  confidentiality  and  integrity. 
Dubbed  Security-Enhanced  (SE)  Linux,  the  NSA’s  version  has  a  strong  access-control 
architecture  incorporated  into  the  kernel  to  foil  tampering  and  bypassing  of  security 
mechanisms.  The  NSA  chose  Linux  as  a  platform  for  this  work  because  of  its  open 


C&W:  Host  with  most? 

Cable  &  Wireless  isn’t  done  with  its  Web  hosting 
investments.  Chairman  Graham  Wallace  says  the 
company  will  likely  invest  another  $660  million  to 
boost  its  Digital  Island  subsidiary,  formed  upon 
Cable  &  Wireless  acquiring  the  Web  hoster  in 
August  for  $340  million.  Cable  &  Wireless  also  says 
it’s  looking  to  possibly  invest  in  other  troubled  IP 
companies  that  have  a  significant  data  center 
presence, such  as  PSINet.  It’s  also  rumored  that  the 
service  provider  may  be  interested  in  buying 
Exodus  Communications,  but  Cable  &  Wireless 
would  not  comment  on  this. 


The  Good  The  Bad  The  Ugly 

Vint  Cerf  an  Internet  pioneer  and  WorldCom  executive, 
wants  to  restore  honor  to  the  term  "hacker."  He's  filmed  a  public 
service  announcement  for  a  group  called  Cyberangels  aimed  at 
getting  hackers  to  put  their  energies  to  good  use  —  and  to  stop 
attacking  Web  sites  and  creating  viruses. 

Poor  John  Chambers.  Not  only  did  the  Cisco 
CEO  make  a  symbolic  gesture  earlier  this  year  of  reducing 
his  annual  salary  to  a  measly  buck,  but  now  the  company^ 
has  announced  that  its  executives  will  go  without 
bonuses  this  year  for  missing  financial  targets. 

"There  will  be  a  continued  slowdown 

over  the  next  six  months,  and  many  companies  are 
going  to  shut  off  the  IT  spigot,"  said  Knerko 
Burney,  a  Cahners  In-Stat  Group  analyst,  at  a 
business-to-business  conference  last  week  in  Atlanta. 


Computer  Associates  on  government  hot  seat 

The  U.S.  Department  of  Justice  last  week  filed  an  antitrust  lawsuit  against  Computer 
Associates  in  relation  to  the  company’s  $3.5  billion  buyout  of  Platinum  Technology  in 
1999.The  Justice  Department, seeking  up  to  $1.27  million  in  civil  penalties, says  CAand 
Platinum  broke  premerger  waiting-period  requirements  and  price-fixing  laws.  CA  is 
accused  of  ending  large  discount  rates  for  Platinum  customers  purchasing  software 
leases  before  the  end  of  the  department’s  specified  waiting  period.  CA  denied  any 
wrongdoing  and  issued  a  statement  saying, “From  the  moment  we  announced  our  inten¬ 
tion  to  acquire  Platinum  until  the  Department  of  Justice  approved  the  transaction,  CA 
acted  reasonably  and  lawfully.” 

Driving  open  standards  for  streaming  media 

Part  of  the  problem  with  streaming  media  is  the  bevy  of  different,  incompatible  formats. 
Theres  RealNetworks,  Microsoft  and  QuickTime,  each  requiring  its  own  player. The  In¬ 
ternet  Streaming  Media  Alliance  is  looking  to  change  the  proprietary  nature  of  stream¬ 
ing  with  the  release  of  the  1SMA  1.0  standard,  which  calls  for  companies  to  use  the 
MPEG4,  Real-time  Transfer  Protocol/Real-time  Streaming  Protocol  and  other  standards 
to  build  interoperable  products.  Members  include  Cisco,  IBM,  Apple,  Kasenna,  Phillips 
and  Sun.  1SMA  1.0  can  be  downloaded  from  www.isma.tv  for  $150. 


environment.  SE  Linux  does  not  correct  any  flaws  in  Linux,  but  rather  serves  as  an 
example  of  how  mandatory  access  controls,  including  superuser  access,  can  be 
added  to  the  operating  system.  At  present,  SE  Linux  only  supports  the  Intel  x86  plat¬ 
form  and  has  only  been  tested  on  Red  Hat  Linux.The  release  includes  documentation 
and  source  code.  Users  can  download  it  from  www.nsa.gov/selinux/index.html. 

Ray  Lane  named  SeeBeyond  chairman 

Former  Oracle  President  Ray  Lane,  last  week  assumed  the  chairman’s  seat  at  See¬ 
Beyond  Technology  after  serving  on  its  board  for  four  years.  According  to  statements, 
Lane  will  assume  a  greater  role  in  management  of  the  Monrovia,  Calif.,  company, 
which  develops  application-integration  software  and  business-to-business  integration 
tools.  Following  his  abrupt  departure  from  Oracle  last  year,  Lane  joined  venture  capi¬ 
tal  firm  Kleiner  Pbrkins  Caufield  &  Byers  as  general  partner  —  a  position  he’s  keeping, 
along  with  several  board  seats.  Lane  sits  on  the  boards  of  a  number  of  tech  compa¬ 
nies,  including  Asera, eLance,  Marimba  Networks, Sheer  Networks  and  Valdero.  He  also 
holds  seats  at  Carnegie  Mellon  University,  Special  Olympics  International  and  West 
Virginia  University 
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‘Wireless  LAN  provided  either  through  MultiPort  or  PC  card.  Wireless  WAN  provided  through  PC  WAN  card;  wireless  air  time  contract  required.  802.11  functionality  (in  a  MultiPort  module)  is  sold  separately.  PC  cards  sold  separately.  Subject  to  wireless  network 
coverage  "Suggested  retail  price.  Compaq,  the  Compaq  logo,  Evo,  iPAQ  and  Inspiration  Technology  are  trademarks  of  Compaq  Information  Technologies,  LP.  in  the  U.S.  and  other  countries.  Intel,  the  Intel  Inside  logo  and  Pentium  are  trademarks  or  registered 
trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  Products  and  company  names  mentioned  herein  may  be  trademarks  or  registered  trademarks  of  other  companies  ©2001  Compaq  Computer  Corporation. 


6 


NetworkWorld 


10/8/01 


News 


www.nwfusion.com 


Novell  sues  over  ‘cereal  box’  ad  campaign 


■  BV  DENI  CONNOR 

PROVO,  UTAH—  A  recent 
Microsoft  ad  campaign  that  in¬ 
volved  sending  fake  cereal 
boxes  with  NetWare-to-Windows 
NT/2000  software  inside  to  Net¬ 
Ware  users  has  left  a  bad  taste  in 
Novell’s  mouth.  So  bad  that  Nov¬ 
ell  last  week  slapped  a  lawsuit 
on  Microsoft  for  “making  and 
distributing  false  and  mislead¬ 
ing”  statements  about  Novell 
and  NetWare  6. 

The  “Microsoft  Server  Crunch" 
campaign  is  the  latest  in  what 
Novell  claims  has  been  a  string  of 
allegedly  unfair  competitive  tac- 


What  did  Novell  users  find  inside  their 
boxes  of  Microsoft  Server  Crunch? 
NetWare-to-Windows  migration  tools. 


tics  by  Microsoft. 

In  April,  Microsoft  pub¬ 
lished  an  story  on  the  MSN 
Money  Central  Web  site  in¬ 
dicating  that  Novell  was 
abandoning  the  software 
business  in  favor  of  con¬ 
sulting  in  light  of  its  union 
with  Cambridge  Techno¬ 
logy  Partners.  Novell  ap¬ 
prised  Microsoft  of  the  er¬ 
rors  in  the  story,  and  Micro¬ 
soft  corrected  them. 

But  the  same  kind  of  com¬ 
petitive  claims  by  Microsoft 
showed  up  again  in  the 
cereal  box  campaign.  Novell 
took  exception  to  Microsoft 


II  Microsoft's  response  is  like  putting  a  Band- 
Aid  over  a  bullet  wound.  9  9 


A  Novell  spokesman 

statements  such  as:  “What’s  the 
expiration  date  on  that  NetWare 
platform?”  and  “You’re  left  with  a 
server  platform  without  the  full 
support  of  its  manufacturer’’ 
Novell  demanded  that  Micro¬ 
soft  reissue  the  advertising  mate¬ 
rials  and  highlight  any  retrac¬ 
tions,  but  Microsoft  agreed  only 
to  retract  part  of  the  statements 


Vendors  shore  up  VPN  software 


■  BY  TIM  GREENE 

NetScreen  Technologies  is  up¬ 
dating  the  operating  system  for 
its  gateways  to  support  network 
address  translation,  support  that 
is  needed  for  VPNs  to  work  prop¬ 
erly  across  certain  configura¬ 
tions  of  firewalls  and  routers. 

With  Screen  OS  3.0,  NetScreen 
is  clearing  a  roadblock  to  VPNs 
that  can  be  caused  by  devices 
that  perform  NAT.  NAT  is  used  to 
mask  private  IP  addresses  be¬ 
hind  a  firewall  or  router  that 
has  a  public  IP  address.  The 
firewall  or  router  resolves  the 
translation  between  the  public 
and  private  addresses.  Because 
authentication  of  VPN  packets 
relies  on  the  IP  address,  traffic 
can  be  denied  by  VPN  clients 
and  gateways  that  don’t  sup¬ 
port  NAT. 

NetScreen’s  firewall/VPN  gate¬ 
ways  sit  between  corporate  sites 
and  the  Internet. 

Screen  OS  3.0  also  supports 
Advanced  Encryption  Standard 
encryption,  which  is  consider¬ 
ably  more  secure  than  Data 
Encryption  Standard  because 
AES  uses  a  longer  encryption 
key,  making  it  harder  to  crack. 
Support  for  AES  now  is  primarily 
for  interoperability  testing  with 
other  vendors'  products,  Net- 


Screen  officials  say.  As  AES 
becomes  more  popular,  Net- 
Screen  says  it  will  make  custom 
chips  to  speed  encryption. 

Screen  OS  will  ship  with  new 
NetScreen  gateways  this  quarter. 
Current  users  with  service  con¬ 
tracts  can  download  the  software 
from  the  company  Web  site. 

Meanwhile,  Check  Point  Soft¬ 
ware  is  introducing  a  new  ver¬ 
sion  of  its  management  plat¬ 
form  to  help  improve  reliability 


of  managed  VPN  and  firewall 
services. 

Called  Provider-1  Next  Genera¬ 
tion,  the  software  can  store  man¬ 
agement  data  and  log  informa¬ 
tion  on  multiple  servers,  use  a  sin¬ 
gle  command  to  push  policy 
changes  to  multiple  devices,  and 
automatically  update  software 
and  licenses  across  a  network. 
These  changes  help  make  the 
management  platform  more  resil¬ 
ient  and  reduce  errors  configur¬ 


ing  devices. 

Provider-1  Next  Generation 
server  runs  on  Solaris,  and  the 
management  graphical  user 
interface  for  it  runs  on  Solaris 
and  Windows  98,  2000  and  NT. 
Pricing  depends  on  the  number 
of  users.  It  costs  $40,000  to  sup¬ 
port  10  customers  or  separate 
policy  groups. 

Check  Point:  www.checkpoint. 
com;  NetScreen:www.netscreen 
.com 


in  the  advertising  material. 

“Microsoft’s  response  is  like 
putting  a  Band-Aid  over  a  bullet 
wound,”  a  Novell  spokesman 
said. 

Novell  is  asking  the  US.  District 
Court  to  stop  Microsoft’s  alleg¬ 
edly  false  advertising  about  No¬ 
vell  and  NetWare  and  to  award 
monetary  damages.  Microsoft  is 
reviewing  the  complaint  and 
determining  an  appropriate 
response. 

NetWare  customers  are  glad  to 
see  Novell  taking  action,  but 
wished  the  company  had  fought 
back  sooner. 

“If  Novell  was  going  to  fight 
back  against  all  the  false  and 
misleading  statements  Microsoft 
has  made  about  Novell  prod¬ 
ucts,  they  should  have  started 
doing  so  10  years  ago  when  they 
had  a  far  better  product  and  a 
large  market  share  . . .  instead  of 
turning  the  other  cheek,”  says 
Doug  Spindler,  president  of  the 
San  Francisco  Windows  NT  and 
NetWare  User  Groups.  ■ 


Avaya  airs  customer  service  software 


Offering  supports  e-mail,  phone  and  Web  interactions. 


BY  PHIL  HOCHMUTH 
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BASKING  RIDGE,  N.J.  —  Avaya 
last  week  announced  improve¬ 
ments  to  its  customer  relationship 
management  software  aimed  at 
making  customer  contact  centers 
more  manageable  whether  inter¬ 
actions  take  place  via  the  phone, 
e-mail  or  Web  chat. 

Interaction  Center  —  the  first 
CRM  product  Avaya  has  released 
since  it  acquired  CRM  vendor 
Quintus  in  February  —  also  sup¬ 
ports  larger  call  centers.  It  doubles  the  num¬ 
ber  of  agents  that  can  connect  to  a  server  to 
6,000  from  3,000,  which  was  the  limit  on  the 
older  Quintus  offering. 

The  new  software  runs  on  either  a  Solaris 
or  Windows  NT/2000  server  (the  product 
from  Quintus  only  ran  on  NT)  and  works 
with  traditional  and  IP  PBXs;  automatic  call 
distributors;  and  back-end  customer  data¬ 
base  and  records  applications.  Interaction 


Customer  care 

Avaya’s  new  CRM  software: 


Provides  centralized 
management  for  tele¬ 
phone,  e-mail  and  Web 
chat  customer  agents. 

Runs  on  Solaris 
(previously  limited  to 
Windows  NT/2000). 


Works  with  IP  PBXs,  such 
as  Avaya’s,  and  older 
telephony  gear,  such  as 
those  from  Aspect,  Mitel, 
Nortel  and  Siemens. 

Supports  up  to  6,000  agents 
per  server,  up  from  3,000. 


Center  can  be  used  to  set  up  rules  for  rout¬ 
ing  customer  calls  to  agents  and  can  tie 
together  various  types  of  correspondence 
—  such  as  e-mail  or  Web  chats  —  into  a  cus¬ 
tomer-history  record  accessible  from  a  call 
agent’s  workstation. 

Avaya  also  has  added  a  tool  that  allows 
call  center  administrators  to  set  rules  for 
phone,  e-mail  and  Web-based  customer 
help  staff  through  one  application.  Ad¬ 


ministrators  can  use  the  software 
to  run  reports  on  help-center 
performance. 

Interaction  Center  is  being  in¬ 
stalled  at  the  American  Associa¬ 
tion  of  Pediatrics  to  make  it  easier 
for  doctors  to  buy  brochures  and 
books  offered  by  the  group. 

This  software  should  give  our 
customers  one-stop  shopping 
when  they  contact  us,"  says  Bar¬ 
bara  Kulp,  a  technology  analyst 
for  the  organization.  She  says  the 
group’s  50  agents  will  be  able  to 
call  up  past  e-mails,  Web  transactions  and 
phone  conversations  with  the  software  to 
better  answer  customer  questions.  “Cus¬ 
tomers  won't  have  to  go  from  department  to 
department,"  she  says. 

Interaction  Center  costs  $500  to  $3,500 
per  agent,  based  on  whether  agents  use 
e-mail,  telephone,  the  Web  or  a  combina¬ 
tion  of  them  to  interact  with  customers. 

Avaya:  www.avaya.com 


Control  the  flow  of  I P 

5  S  THE  POWER  O  F  YOUR  NETWORK 


% 


I- 


h 


i 


Different  users  demand 
different  services  and  the 
applications  associated  with 
them:  VPNs,  e-commerce, 
streaming  and  broadcast 
media  and  large  file  transfers. 
Whatever  the  need,  our  IP 
platforms  give  you  the 
precise  control  for  the 
applications  they  want  when 
they  want  them  ...  now  and 
into  the  future.  That's  because 
our  suite  of  IP  products 
provides  simple,  scalable. 


integrated  solutions  for 
voice,  video  and  data.  Their 
extensive  modularity  creates 
flexibility  for  multiple 
configurations  of  VDSL  and 
Ethernet  up  to  10  gigabit 
from  a  single  platform. 

And  by  offering  the  widest 
possible  range  of  interfaces 
from  twisted  pair  to  gigabit 
Ethernet  fiber,  our  non- 
blocking,  multi-layer  IP 
switching  and  routing 


platforms  eliminate  the 
expense  of  media  converters. 
So  speed  up  the  flow  without 
flooding  your  network. 

Whether  you  need  a  solution 
for  MTU/M  DU,  SME  or  LME, 
contact  Telco  Systems' 
network  specialists  today 
at  1-800-221-2849,  ext. 

2250.  Or  visit  us  at 
www.telco.com/ipplatformsl5g.cfm 
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Resonate  automates  apps,  net  mgmt. 

Company  will  update  two  software  products  to  better  manage  service  levels  in  Web  environments. 


Managing  online  service 


Resonate’s  Commander  software  shows  users  how  well 
their  Web  site  completes  transactions  for  customers. 


Net  managers  can  group  parts  of  their 
network  by  services  to  determine 
where  a  failure  has  occurred. 
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Service*  |  SDt  |  Eva 


|  Actions  |  Calendar  |  Test!  |  Aejoft* 


In  one  view,  users 
see  what  service  is 
down  and  the  source 
for  the  failure. 
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Service  Detail 

Services  :  Product  Catalog 
Details  |  SLOt  |  Stats  |  Tests  |  Actions 


Oct  oils 

Description  Online  Product  Catalog  tenrira  for  all 


Tiers 

El  Internet  Router 
B  Firewall  Reuter 
(|  Inltmul  SmiUii  1 
6  Certrai  Dispatch 
B  Internet  Switch  2 
B  Web  Server  Farm 
B  Internet  Switch  3 
B  DM2  Fu  email 
B  OMZ  Switch  1 
B  App  Server  Farm  '3  /  5) 
B  DM2  Switch  2 
B  Database 


•  Tim* 

0620.2001  -  07 
0620200-  -  07; 
0620  2001  -  07; 
0620  2001  -  07: 
06202001 
0620200. 
0620.2001 
0620200. 


: 56:41  (PST) 
(PST) 
(PST) 
(PST) 
:S6:41  (PST) 
:  56:41  (PST) 
:  56:41  (PST) 
:  56:41  (PST) 
'56:41  (PST) 
:  56:41  (PST) 
:  56:41  (PST) 
.54,41  (PST) 


Severity 

Cribca 

Wamirg 


Sub-Event 

MS  IIS  ‘  ASP  Bottleneck 
Weblotic  5  /  Connection  Pool 
MS  SQl  /  Connection  Usege 
MS  IIS  /  Connection  Usage 
Solens  /  CPU  Contention 
Win  2000  /  CPU  Contention 
Win  NT  /  CPU  Contention 
WebLocic  5  /  Heap  Usage 


MS  IIS  Web  Server  8 

BEA  Wablogic  1 

MS  SQl  Serve- 1 

MS  IIS  Web  Server  8 

Solans 

Win  20)0 

Win  NT 

BEA  Wtblogic  l 
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Commander  analyzes  events  on  the  network  and 
decides  how  to  redistribute  the  load  among  servers. 


Threshold 

Threshold 

Threshold 

Threshold 

Threshold 


■  BY  DENISE  DUBIE 

ORLANDO  —  Resonate  this 
week  will  unveil  the  latest  ver¬ 
sions  of  its  service-level  and  traf¬ 
fic-management  products,  add¬ 
ing  automation  to  correct  server 
problems  or  redistribute  server 
loads. 

Here  at  the  Gartner  Sympos- 
ium/ITxpo,  Resonate  will  intro¬ 
duce  Version  2.0  of  Commander, 
software  that  manages  applica¬ 
tions,  network  devices  and  sys¬ 
tems  in  relation  to  Web  site  and 
transaction  performance,  and  Ver¬ 
sion  4.0  of  Central  Dispatch,  the 
company’s  LAN-based  traffic- 
management  software. 

The  enhancements  to  Com¬ 
mander  give  it  the  ability  to  col¬ 
lect  network  and  system  data, 
such  as  information  about  open 
threads  and  memory  usage,  and 
use  it  to  automatically  restart  a 
process  or  reboot  a  server  if  there 
is  a  problem.  It  can  also  reroute 
traffic  by  telling  load-balancing 
switches  to  send  traffic  to  servers 
that  are  not  experiencing  prob¬ 
lems  or  heavy  workloads. 

Commander  includes  a  policy 


engine  that  runs  on  a  dedicated 
server,  plus  agents  that  are 
installed  throughout  a  network.  It 
also  features  modules  that  plug 
into  specific  operating  systems 
and  applications.  For  example, 


new  to  this  version  is  support  for 
Microsoft  Internet  Information 
Server,  Windows  2000  and  SQL. 
All  reports  and  alarms  are  acces¬ 
sible  via  a  Web  browser. 
“Commander  can  now  embed 


itself  in  the  system  and  look 
around  to  spot  impending  prob¬ 
lems.  It  then  goes  beyond  e-mail- 
ing  or  paging  someone  as  its 
automated  action,” says  Bill  Gass- 
man,an  analyst  at  Gartner.dt  can 
decide  to  slow  down  the  load  on 
any  given  server  to  prevent  that 
problem.” 

He  says  Resonate  is  one  of  the 
first  vendors  to  give  software  that 
much  control  and  warns  users  to 
be  careful  when  handing  over 
their  networks  to  an  automated, 
decision  maker. 

“Completely  automating  things 
like  load  balancing  can  create 
some  problems,  like  a  traffic  cop 
directing  all  traffic  to  a  different 
road.  That  road  will  be  congest¬ 
ed,  too,”  Gassman  says.  “But  for 
systems  that  have  spiky  traffic 
and  require  high  availability,  it’s 
worth  trying.” 

Harry  Nicholos,  assistant  direc¬ 
tor  for  Unix  Web  services  at 
North  Carolina  State  University, 
says  Commander  and  Central 
Dispatch  have  saved  his  staff  a 
lot  of  “manpower  time”  when 
maintaining  the  Web  site  for 
30,000  students  and  users. 


Although  the  university  has  not 
yet  determined  the  amount  of 
money  saved,  Nicholos  says  using 
Resonate  products  lets  him  “add 
capacity  at  a  much  more  incre¬ 
mental  and  granular  level,”  be 
cause  they  show  how  simply 
reconfiguring  servers  or  rerouting 
traffic  can  prevent  slowdowns. 

Central  Dispatch  collects  data 
on  CPU  load  and  server  health, 
and  it  can  now  test  network 
latency  to  determine  session  lat¬ 
ency  in  real  time.  However,  un¬ 
like  Commander,  it  doesn’t  take 
automated  actions  based  on  the 
information.  Also  new  to  this  re¬ 
lease  is  support  for  User  Data¬ 
gram  Protocol  traffic  schedul¬ 
ing,  including  streaming  media, 
voice  over  IP  DNS  and  propri¬ 
etary  protocols. 

The  products  work  with  Cisco 
Arrowpoint,  Nortel  Alteon  and  F5 
switches.  Commander  2.0  is  built 
on  BEA  Systems’ WebLogic  server 
and  an  Oracle  database.  Pricing 
starts  at  $60,000.  Depending  on 
configuration,  Central  Dispatch 
4.0  costs  between  $9,000  and 
$40,000. 

Resonate:  www.resonate.com 


Qwest  turns  up  the  heat  on  service-level  guarantees 

The  company’s  OC-192  backbone  lets  carriers  offer  aggressive  SLAs. 


■  BY  MICHAEL  MARTIN 

DENVER  —  Qwest  Communications  last 
week  announced  one  of  the  most  ambi¬ 
tious  service-level  guarantees  in  the  in¬ 
dustry,  but  like  so  many  other  carriers  is 
leaving  the  burden  of  showing  whether 
service  levels  have  been  met  on  the  cus¬ 
tomer’s  shoulders. 

Under  the  new  service-level  agreements 
(SLA), customers  of  Qwest’s  dedicated  In¬ 
ternet  access  and  VPN  offerings  are  being 
promised  99.5%  packet-delivery  rates  and 
maximum  average  latency  of  50  msec. 
Qwest  also  offers  an  off-net  SLA,  promis¬ 
ing  a  95-msec  maximum,  average  round- 


Correction 


■  The  “How  we  did  it"  portion  of  the  story 
“A  flooded  Held  for  IPSec-based  VPNs  is 
good  for  users,"  (Oct.  1,  page  50)  should 
have  stated  we  used  a  set  of  six  Nokia 

kCryptoCluster  5200  gateways  to  capture 
traffic  for  the  test. 


trip  latency  between  its  own  network  and 
the  networks  of  the  top  five  network  ser¬ 
vice  providers. 

“Before  this,  the  lowest  latency  guarantee 
we  knew  of  was  55  msec,”  says  Counse 
Broders,  an  analyst  with  Current  Analysis. 

The  challenge 

Where  Qwest  falls  short,  Broders  says,  is 
in  requiring  customers  to  monitor  SLA 
compliance  via  Web  portals. 

“The  challenge  here  is  that  the  SLAs 
are  not  proactive.  Customers  still  need  to 
get  in  touch  with  Qwest  if  their  SLAs 
have  been  breached  and  they  want  cred¬ 
it,”  says  Broders,  who  would  like  to  see 
companies  offer  credits  for  failing  to 
live  up  to  SLAs  without  any  customer 
intervention. 

Qwest’s  upgrade  from  an  OC-48  to  OC- 
192  IP  backbone  has  made  the  carrier’s 
network  more  efficient  and  able  to  handle 
the  more  aggressive  SLAs,  according  to 
Martin  Capurro,  a  product  management 
director  at  the  carrier. 

The  new  SLAs  are  available  immediately 
to  customers  signing  new  contracts. 
Customers  with  existing  contracts  will 


have  to  wait  until  their  contracts  come  up 
for  renewal. 

Who  is  Calpoint? 

Separately,  financial  analysts  last  week 
pressured  Qwest  into  explaining  a  rather 
murky  relationship  it 
has  with  a  practically 
unknown  start-up 
called  Calpoint.  The 
analysts  uncovered 
what  they  saw  as  ques¬ 
tionable  accounting 
practices  by  Qwest  in 
relation  to  Calpoint, 
and  some  were  con¬ 
cerned  that  Qwest 
might  be  bankrolling 
the  newcomer’s  entire 
operation. 

Qwest  CEO  Joseph 
Nacchio  denies  any 
such  arrangement. 

However,  Qwest  is 
selling  the  start-up  $300 
million  worth  of  net¬ 
work  gear  to  help  build 
a  network  through 


which  Qwest  will  resell  managed  wave¬ 
length  services.  Nacchio  says  that  by  using 
Calpoint  to  set  up  the  service,  Qwest  is 
reducing  its  time  to  market  by  at  least 
three  quarters. 

Qwest  plans  to 
lease  capacity  on 
Calpoint’s  network 
for  five  years,  then 
integrate  the  man¬ 
aged  wavelength  ser¬ 
vice  into  Qwest’s 
own  backbone. 
While  the  managed 
wavelength  services  won’t 
kick  in  until  early  next 
year,  Qwest  is  taking  some 
immediate  action  to  bet¬ 
ter  serve  large  companies. 
The  provider  is  creating  a 
new  sales  group  that  will 
concentrate  exclusively 
on  the  top  1,000  global 
customers.  A  second 
group  will  handle  other 
Qwest  business  accounts 
in  North  America. 

Qwest:  www.qwest.com 


Gybercrime 
speak  ^ 

In  other  Qwest  news, 
CEO  Joseph  Nacchio  last 
week  told  a  U.S.  Senate 
committee  that  the 
federal  government 
should  push  to  make 
the  nation's  networks 
more  secure.  One  of 
his  suggestions  was  to 
increase  the  penalties  for 
cyberattacks  and  give  law 
enforcement  agencies 
greater  freedom  to 
investigate  such  attacks. 


T 


Not  all  firewalls  are  identical. 

Ours  are  faster  and  more  secure,  for  example. 

Symantec “  firewalls  and  security  appliances  offer  some  of  the  fastest  Web  and  file-transfer  throughput  rates  in  the  industry.  And  all  with  no 
compromise  in  security. 

Our  Symantec  Enterprise  Firewall,'"  for  example,  is  up  to  150%  faster  than  our  competitor's  enterprise  firewall Designed  for  companies  that 
need  the  greatest  flexibility,  it  allows  you  to  set  granular  control  policies  that  let  the  right  people  in  and  keep  the  wrong  ones  out. 

Symantec's  VelociRaptor  firewall/VPN  appliance  offers  similarly  impressive  levels  of  speed  and  control 
in  an  appliance  that’s  easy  to  install  and  simple  to  use.  A  plug-and-protect  solution,  it’s  flexible,  scalable 
and  priced  affordably. 

Finally,  Symantec  Firewall/VPN  100  and  200  Security  Appliances  are  easy-to-use  and  easy-to-manage 
appliances  for  your  remote  or  branch  offices.  They  allow  for  quick,  secure  access  to  or  from  the 
Internet,  connecting  all  your  network  devices  with  one  product.  Symantec "  Firewall/VPN  100  and  200 

Symantec  firewalls  and  VPN  technology  are  key  components  of  Symantec  Enterprise  Security.  Combining  world-class  technology,  comprehensive 
services  and  global  emergency  response,  Symantec  Enterprise  Security  helps  businesses  run  securely  and  with  confidence. 

Want  to  make  an  informed  decision  about  your  firewall?  Call  800-745-6054  ext.  1,  promo  code  9GL5. 

For  a  free  Security  Reference  Chart  offering  a  wealth  of  information  about  security  threats,  visit  www.symantec.com/ses8: 


Symantec  VelociRaptor 


Symantec 

•firsBench  II  Comparison  of  Symantec  Enterprise  Firewall  (SEF)  6  5  and  Qn-ckPanl  4 1  sp2  Firewall  Test  conducted  Oy  independent  research  firm.  3/5W  .In  five  separate  tests  Mat  compared  SEF  6.5  in  Checkpoint  4  l  SEF  ran  3r%  to  !50‘‘*r  faster.  ‘Offer  goad  while  supplies  last. 
l>.nt  one  reference  chart  per  name,  address,  company  or  household.  Symantec,  the  Symantec  tone  and  Vdociilaptor  are  U.S  registered  trademarks.  Symantec  Enterprise  firewall  is  a  trademark  of  Symantec  Corp.  <52001  Symantei  CorporaiiMi  All  Hpiiis  Reserved 
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Masergy  guarantees  video  traffic  delivery 


■  BY  DENISE  PAPPALARDO 

IRVING,  TEXAS  —  IP  service 
provider  Masergy  Communic¬ 
ations  will  flesh  out  its  portfolio 
this  week  by  launching  a  network 
service  optimized  for  video  com¬ 
munications. 

The  start-up,  which  launched  its 
first  two  services  in  August,  has  a 
Multi-protocol  Label  Switching 
(MPLS)  OC-12  backbone  with  10 
points  of  presence  across  the 
country.  The  video  service,  which 
is  designed  to  support  time-sensi¬ 
tive  audio  and  video  communica¬ 
tions,  uses  MPLS  to  set  priority 
paths  across  the  network. 

The  service  does  not  include 
videoconferencing  gear,  says 
Mike  Beaton,  senior  vice  presi¬ 
dent  of  global  sales  and  business 
development.  It’s  simply  opti¬ 
mized  for  video  communications 
that  can  be  negatively  affected  by 
network  congestion  or  jitter. 

The  service-level  agreements 
promise  100%  packet  delivery, 
100%  in-sequence  packet  deliv¬ 
ery  a  minimum  of  10  msec  of 
latency  and  jitter,  and  less  than  1- 
second  network  failover  to  a 
back-up  connection  in  the  case 
of  an  outage. 

Masergy  Video  complements 
the  company’s  inControl  IP  and 
inControl  Link  services.  The  in¬ 
Control  IP  service  is  a  point-to- 
point  dedicated  IP  offering  that 
supports  two  traffic  classes,  nor¬ 
mal  and  priority  Users  can  chose 
to  tag  all  their  business  transac¬ 
tion  applications  as  priority  traf¬ 
fic,  while  reserving  normal  traffic 
for  Web  surfing  and  e-mail. 
Internet  access  is  bundled  in  at 
no  additional  cost. 

The  inControl  Link  offering  is  a 
Layer  2  switched  service  for  users 
who  want  to  set  up  VPNs  and  use 
Masergy’s  backbone.  This  service 
offers  users  three  classes  of  ser¬ 
vice  —  normal,  priority  and 
reserved.  The  reserved  level  is 
optimized  for  time-sensitive  traffic 
such  as  voice. 

Users  access  Masergy’s  network 
via  local  T-l  or  T-3  lines,  frame 
relay  or  metropolitan  Ethernet 
connections.  The  offerings  are 
available  in  Atlanta,  Chicago, 
Dallas,  Denver,  Los  Angeles,  Mi¬ 
ami,  New  York,  Philadelphia,  San 
Francisco  and  Washington,  D.C. 

Formed  a  year  ago,  Masergy 
built  its  OC-12  network  by  leasing 
transport  capacity  from  Level  3 
Communications.  It  acquired 
many  of  its  POP  facilities  from 


contact  customer  service.  User 
changes  are  made  in  “near  real¬ 
time,”  says  Rick  Wilder,  principal 
scientist. 

Masergy  plans  to  offer  a  variety 
of  managed  services,  including 
voice  over  IP  and  network  fire¬ 
wall.  The  company  is  in  the 
process  of  deploying  Sonus 
Networks’  voice-over-IP 
gateways  and  expects  to 
launch  voice-over-IP  support 
in  December  with  services 
rolling  out  in  January  Masergy 
expects  to  rollout  a  man¬ 
aged  VPN  service  in 
February  that  will  include 
the  use  of  network-based 
firewalls. 

The  company  has  plans  to  intro¬ 
duce  services  in  Western  Europe 
and  Latin  America  by  year-end. 
Masergy  leases  capacity  from 
Storm  Communications  in  Eur¬ 
ope  and  is  forming  a  relationship 
with  1FX  Networks,  a  service 
provider  in  Latin  America. 

The  Masergy  Video  service  is 
available  for  $1,000  per  month 
for  a  T-l  port  plus  $250  to  $2,000 
per  month  for  64K  bit/sec  up  to 
1.544M  bit/sec  of  dedicated 
bandwidth. 

Masergy:  www.masergy.com 


Masergy's  network 

The  service  provider  leases  OC-12,  622M  bit/sec 
connections  from  Level  3  to  create  its  national  backbone. 
It  has  points  of  presence  in  10  cities  with  18  more  cities 
planned  to  come  online  by  year-end. 


Zephion  Networks,  a  troubled 
competitive  local  exchange  car¬ 
rier  that  filed  for  bankruptcy  pro¬ 
tection  in  July 

Masergy  raised  $57.4  million  in 
its  first  round  of  financing  last 
month.  Key  investors  include 
Meritage  Private  Equity 
Funds,  Centennial  Ventures, 
Lightspeed  Venture  Part¬ 
ners  and  Kleiner  Perkins 
Caufield  &  Byers. 

The  company  com¬ 
petes  with  some  of  the 
biggest  names  in  tele¬ 
com,  including  AT&T, 
WorldCom,  Equant  and 
Teleglobe,  which  all  offer 
MPLS  network  services.  One 
reason  Masergy  has  been  able 
to  drum  up  funding  during  a 
time  when  capital  is  short  may  be 
its  ability  to  offer  users  more  con¬ 
trol  over  their  network  connec¬ 
tions. 

“Masergy  services  are  pegged 
toward  customers  that  are  con¬ 
cerned  with  performance  moni¬ 
toring,  management  and  being 
able  to  look  at  how  specific  appli¬ 
cations  are  performing,”  says 
Maribel  Dolinov,  senior  analyst  at 
Forrester  Research. 

The  company  is  first  targeting  a 


handful  of 

markets  where  they  can 
likely  win  a  small,  but  solid 
customer  base  because  of  some 
users’  general  dissatisfaction  in 
dealing  with  large  service  pro¬ 
viders,  she  says.  “The  fact  is,  there 
have  been  a  lot  of  customer  ser¬ 
vice  issues  with  the  big  telecom 
companies.” 


users  tap  into  a  ser¬ 
vice  control  center  from  a  Web 
browser.  This  portal  lets  users 
securely  view  network  usage  sta¬ 
tistics,  order  additional  services, 
set  different  priority  levels  for 
specific  applications,  monitor 
application  performance,  gener¬ 
ate  performance  reports  and 


Symantec  appliances  handle  intrusion  detection 


■  BY  ELLEN  MESSMER 

CUPERTINO,  CALIF—  Symantec 
next  week  will  roll  out  three  fire¬ 
wall/VPN  appliances  for  small 
offices  that  might  be  hard  to  dis¬ 
tinguish  from  the  rest  in  an  in¬ 
creasingly  crowded  field,  though 
they  offer  the  added  benefit  of 
intrusion-detection  technology 

The  compact  boxes  come  pre¬ 
configured  so  offices  of  up  to  40 
employees  can  set  up  a  secure 
gateway  for  LAN-based  Internet 
access  via  cable  modem  or  DSL  connections 
(see  chart,  right). 

Each  device  can  be  used  to  establish  an  IP 
Security  (IPSec)-based  VPN  tunnel  with  an¬ 
other  Symantec  appliance.  However,  given 
the  bleak  state  of  interoperability  with  IPSec 
devices  across  vendor  lines,  Symantec  won’t 
promise  VPN  tunneling  interoperability  with 
other  vendors’  offerings. 

The  Symantec  firewall/VPN  models  are  all 
full-featured  firewalls  and  not  “dumbed 
down,”  insists  Barry  Cioe, Symantec’s  director 
of  product  development.  But  configuration 
changes  to  any  of  the  three  appliances  can 
only  be  made  manually  via  a  Web  browser, 


Thinking  small 

Symantec  is  targeting 
small  offices  with  its  new 
Firewall/VPN  Appliances. 


Model 

Ports 

Users  supported 

Price 

100 

1  WAN,  1  LAN 

Up  to  20 

$500 

200 

2WAN,  2  LAN 

Up  to  40 

$900 

200R 

2WAN.2  LAN 

Up  to  40 

$1,200 

Note:The  200R  adds  support  for  the  Symantec  VPN  client  for  remote  users. 


and  there’s  no  management  console  to  cen¬ 
trally  automate  changes  or  capture  alerts. 
The  next  version  will  include  more  sophisti¬ 
cated  management,  Cioe  says. 

Symantec  already  sells  one  firewall/VPN 
appliance,  the  high-end  Linux-based  Veloci- 
Raptor,  which  can  support  14,000  simultane¬ 
ous  users  via  T-3  lines.  But  so  far,  Veloci- 
Raptor  hasn’t  appeared  to  make  inroads  in 
the  fast-growing  firewall/VPN  appliance 
market,  according  to  market  research  firm 
I  DC. 

That  market,  estimated  at  $942  million  last 
year,  was  dominated  by  Cisco  with  a  45% 
share  and  Nokia  with  22%.  Vendors  special¬ 


izing  in  low-end  appliances  — 
SonicWall,  WatchGuard  Tech¬ 
nologies,  NetScreen  Technol¬ 
ogies  —  each  claimed  about 
a  6.5%  share  last  year.  Brian 
Burke,  1DC  senior  research  ana¬ 
lyst,  says  Symantec  does  not  yet 
account  for  even  1%  of  the  mar¬ 
ket,  though  he  says  that  could 
change  when  this  year’s  num¬ 
bers  are  tallied. 

Burke  notes  that  last  year 
marked  the  first  time  firewall/ 
VPN  appliances  outsold  software- 
based  firewall/VPN  products,  which  recorded 
$735  million  in  sales. 

Some  analysts  are  skeptical  that  Symantec 
can  dislodge  competitors  in  the  market. 

“They’ve  got  a  nonstarter  here  because 
there’s  a  mismatch  between  the  manageabil¬ 
ity  and  the  target  customer,”  says  Eric 
Hemmendinger.an  Aberdeen  Group  analyst. 
In  other  words,  the  appliances  might  still  be 
too  complex  for  small  offices,  he  says. 

Although  Symantec’s  pricing  is  as  low  as  its 
competition’s  prices,  that  alone  may  not  be 
enough  to  win  market  share,  Hemmendinger 
adds. 

Symantec:  www.symantec.com 
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Gigabit  capability  on  your  current  Cat -5  network  isn’t  a  pipe  dream.  With  Inter  PRO/IOOO  T  Server  Adapters  you  can  increase  your  bandwidth  capacity 
by  a  massive  ten  times.  These  gigabit  adapters  work  with  your  existing  10/1 00Mbps  network  and  will  seamlessly  ramp  up  to  1 0OdMbps.  And  they’re  not 
just  super-fast.  They’re  super-flexible.  Intel  PRO/IOOO  T  Server  Adapters  offer  advanced  server  features  like  load  balancing  and  fault  tolerance  across 
multiple  operating  systems,  inter5  PRO  Network  Connections,  the  intelligent  way  to  connect.  For  more  information  and  a  trial  kit,  visit  intel.com/network/go/cat5/ 
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Sun  airs 
Solaris  9 
beta  code 


■  BY  DENI  CONNOR 

PALO  ALTO  —  Sun  launched  a 
beta-test  version  of  Solaris  last 
week  that  has  a  slew  of  perfor¬ 
mance,  scalability  and  reliabili¬ 
ty  improvements  for  servers  and 
workstations  in  enterprise  data 
centers. 

Called  Solaris  9  Developer 
Early  Access  software,  the  operat¬ 
ing  system  can  be  downloaded 
from  Sun’s  Web  site.  Solaris  runs 
across  most  of  Sun’s  hardware 
line,  from  workstations  to  the  lat¬ 
est  StarCat  server,  which  supports 
as  many  as  106  processors. 

It  is  missing  support  for  some 
features,  such  as  The  Gnome, 
open  source  graphical  user 
interface  that  lets  users  build 
Linux  applications.  However,  the 
trimmed-down  version  of  Solaris 
9  will  feature  support  for  other 
advanced  features,  such  as  the 
Reconfiguration  Coordination 
Manager  (RCM)  API,  which  lets 
users  see  what  happens  with  a 
given  application  when  changes 
are  made  on  the  fly  to  partitions 
or  internal  hardware  such  as  a 
CPU  board  on  a  Solaris  system. 

Solaris  9’s  partitioning  technol¬ 
ogy  lets  users  make  changes  to 
either  a  server’s  software  or  hard¬ 
ware  without  shutting  down  the 
system.  For  example,  the  RCM 
tools  could  let  a  user  add  another 
CPU  board  to  a  server  and  then 
let  the  application  running  on  the 
server  take  advantage  of  the  extra 
processing  power,  making  the 
software  run  more  quickly 

This  version,  for  SPARC  and 
Intel  machines,  is  the  precursor  of 
a  finished  release  scheduled  to 
ship  in  the  first  half  of  next  year. 

Some  other  significant  new 
features  of  Solaris  9  are: 

•  Improved  file  system  perfor¬ 
mance,  used  by  databases  to 
access  data  on  disk. 

•  The  ability  to  let  a  program 
use  any  size  page  to  access  vir¬ 
tual  memory. 

•  Improvements  for  allocating, 
monitoring  and  controlling  sys¬ 
tem  resources. 

•  An  updated  Volume  Manager 
that  supports  thousands  of  slices 
of  data  to  be  created  per  disk  for 
better  manageability. 

•  Dynamic  reconfiguration  of 
system  resources,  which  lets  ad- 

See  Solaris,  page  14 


Nortel 

continued  from  page  1 

president  of  Communications 
Network  Architects  in  Washing¬ 
ton,  D.C.  and  a  Network  World 
columnist.  “It  is  highly  improba¬ 
ble  that  they’ll  exist  the  way  they 
are  today  by  the  end  of  the  year” 
Nortel  has  been  selling  off 
pieces  of  itself  since  mid-year  — 


the  most  recent  being  the  Clarify 
CRM  operations,  for  one-tenth  of 
what  Nortel  purchased  it  for,  and 
the  DMS  circuit-switch  manufac¬ 
turing  operations  —  and  the  pace 
is  likely  to  pick  up. 

Some  users  say  they’re  seeing 
Nortel  deemphasize  its  enterprise 
business. 

“I’d  kind  of  written  them  off  a 
while  ago  as  an  enterprise  ven¬ 
dor,”  says  Fred  Archibald,  a  net¬ 
work  manager  at  the  University 
of  California  at  Berkeley’s  com¬ 
puter  science  department.  “The 
last  few  years  they  have  not  pro¬ 
duced  for  us.  We’ve  been  shop¬ 
ping  around.” 

Dzubeck  believes  Nortel  will  be 
broken  up  and  sold  off,  or  ac¬ 
quired  in  a  leveraged  buyout,  per¬ 
haps  by  competitors  such  as 
Cisco.  Cisco  CEO  John  Chambers 
last  week  dismissed  speculation 
that  Cisco  would  acquire  Nortel 
—  in  whole  —  but  purchasing 
chunks  of  the  company,  such  as 


Nortel’s  market-leading  optical 
business,  may  be  a  more  likely 
scenario,  observers  say 

A  Nortel  spokesman  scoffed 
at  the  idea  that  the  company 
is  looking  to  sell  itself  out  of 
existence. 

“I  find  it  humorous  because 
we’ve  already  talked  about  the 
divestitures  that  we’re  doing,  and 
have  already  done  about  five  of 


those,”  he  says.  “As  for  Nortel  dis¬ 
appearing  or  being  broken  up  to 
be  sold  in  piece  parts,  I  would  not 
agree  with  that.” 

Nortel  is  becoming  a  more 
attractive  target  for  someone  else 
to  buy;  in  fact, “the  possibility  has 
never  been  more  likely”  states 
investment  firm  UBS  Warburg  in 
a  recent  report.  Cisco  might  be 
interested  in  buying  Nortel  for  its 
enterprise  and  voice-switching 
business,  and  European  network¬ 
ing  giants  Ericsson  and  Siemens 
may  also  bid  for  the  company. 

Enterprise  demise 

As  for  the  enterprise  business, 
analysts  say  the  company  will 
continue  to  pay  little  attention 
to  it. 

“Over  the  last  year  Nortel  has 
shown  less  focus  or  at  least  less 
results  on  the  enterprise  side,” says 
Nikos  Theodosopoulos,  a  senior 
analyst  with  UBS  Warburg.  “That 
business  continues  to  be  less  and 


less  relevant  for  the  company 

Nortel’s  share  of  the  Layer  2 
Ethernet  switch  market  has 
dropped  in  six  of  the  last  eight 
quarters,  according  to  Dell’Oro 
Group.  Its  share  of  the  Layer  3 
Ethernet  switch  market  has 
dropped  in  five  of  the  last  eight 
quarters,  and  from  a  market  lead¬ 
ing  37.8%  in  1998  —  when  Nortel 
bought  Bay  Networks  —  to  1 1.8% 
in  2000,  according  to  Dell’Oro. 

“Nortel  talked  little  of  its  enter¬ 
prise  business  in  1999  and  2000, 
apparently  not  paying  much 
attention  to  the  Bay  Networks 
business  that  brought  IP  network¬ 
ing  expertise  and  technology  to 
the  company  says  Bill  Lesieur, 
director  of  the  Network  Business 
Quarterly  at  Technology  Business 
Research.  “In  retrospect,  Nortel 
would  have  been  much  better  off 
if  it  had  fostered  its  enterprise 
business  to  build  up  a  revenue 
base  that  would  have  served  to 
diversify  the  blow  of  the  optical 
market  falling  off.” 

While  selling  off  the  enterprise 
business  is  a  possibility, Theodos¬ 
opoulos  says  it  is  not  likely  in  the 
near  term.  Nortel  seems  to  be 
trying  to  use  its  stable  of  enter¬ 
prise  customers  to  entice  ser¬ 
vice  providers  to  buy  its  carrier 
gear,  he  says. 

Again,  the 
Nortel  spokes¬ 
man  dismissed 
such  a  move. 

“[Nortel  CEO 
John]  Roth  has  been  very  clear 
about  the  enterprise  business 
and  how  important  it  is,  and  the 
amount  of  innovation  that  takes 
place  in  the  enterprise  business 
and  how  that  benefits  service 
providers  and  carriers,”  the 
spokesman  says. 


Indeed,  other  users  believe  pur¬ 
chasing  enterprise  products  from 
Nortel  is  still  a  safe  bet. 

“We  still  believe  they  are  pursu¬ 
ing  most  of  that  [enterprise  busi¬ 
ness],”  says  Phil  Kwan,  associate 
director  of  network  infrastruc¬ 
ture  at  Incyte  Genomics  in  Palo 
Alto. “At  this  point  in  time,  I’m  not 
too  concerned  about  that.” 

But  Roth  steps  aside  as  CEO 
Nov.  1  to  be  replaced  by  current 
CFO  Frank  Dunn.  Dzubeck  says 
Roth’s  firm  resistance  to  breaking 
up  and  selling  off  Nortel  piece  by 
piece  hastened  his  departure. 

“He  did  not  want  to  be  there 
when  it  was  dismantled,”  Dzu¬ 
beck  says.  “He  fought  the  board 
on  this  on  a  continuing  basis. 
Then  it  was  decided  that  there 
wasn’t  any  way  around  it.” 

Whether  the  “D”  word  is  disman¬ 
tled,  divested,  dissolved  ...  or 
something  more  final,  analysts 
say  it’s  time  for  Nortel  to  forget 
about  the  buzz  around  IP  optical 
and  emerging  carriers  and  focus 
on  incumbents  like  the  regional 
Bell  operating  companies. 

“The  biggest  mistake  that  they 
made  was  the  same  mistake  that 
everybody  else  made,  which  was 
getting  caught  up  in  the  hype,” 
says  Thomas  Nolle,  president  of 
CIMI  Corp.,inVoorhees,N.J.,and  a 
Network  World 
columnist.  “They 
focused  too 
much  on  IP  too 
much  on  optics. 
It’s  clear  that  what  Nortel  has  to 
do  is  support  their  traditional  cus¬ 
tomer  base  as  their  customer 
base  structures  to  support  the 
new  shape  of  the  industry  In  the 
future  in  the  industry,  it’s  obvious 
that  the  RBOCs  are  going  to  be 
the  only  survivors.” ■ 


ill  It  is  highly  improbable  that  they'll  exist  the 
way  they  are  today  by  the  end  of  the  year.)  9 

Frank  Dzubeck 

President,  Communications  Network  Architects 
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Nortel's  flagging  fortunes 

Since  January,  Nortel  has  laid  off  thousands  of  employees  and  focused  on  its  more  promising  services/products  in  an 
effort  to  cut  costs,  reverse  losses  and  boost  its  sagging  stock  price. 


Job  cut  announcements 

End  of  second 
quarter 
Approx.  10,000 


End  of  first  quarter 

Approx.  20,000 


Number  of  employees 


i  ..  J 


-  End  of  third 
quarter 
Approx.  20,000 


Year-end 

2000 


94,500 


Expected 
at  year- 
end  2001 


I  .  ...i 


12000 


Businesses  sold,  exited  or  cut  back 

May  - 

Announced  discontinuation 
of  DSL  access  equipment 
business. 


12001 


July - 

Announced  discontinuation  of 
OPTera  Packet  Core  router. 


August 


Nortel  stock  since  October  2000 

$70  . 

60  ^ 


63.625 


T  SOURCE :  NASDAQ  COM 

October 

•  Sold  its  Clarify  CRM  division. 

•  Announced  50%  manufacturing  reduction 
in  its  Photonics  Component  division. 

•  Sold  its  DMS  circuit-switching  product 


Sold  access  business  to  Zhone.  manufacturing  unit. 


100%  of  your  disk  capacity  is  now  usable 
for  storage.  We  call  this  revolutionary  idea 

getting  what  you  pay  for. 


red  Virtual  Array™  disk  system.  It  enables  you  to  use  100%  of 

. 

ft'5-?: 


.  No  more  disk  system  over-purchase.  No  more  wasted 


r  eliminates  the  information  management  and  maintenance 


iisk  systems.  That’s  smart  disk  storage,  www.storagetek.com 


/  y 

STORACETEK’ 

INFORMATION  made  POWERFUL1' 
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Microsoft 

continued  from  page  1 
team  projects. 

The  services  will  be  available 
through  Office  XPBut  Microsoft 
is  moving  them  to  the  core  of 
the  operating  system  along 
with  additional  services,  includ¬ 
ing  white  boarding,  remote 
assistance  and  application 
sharing. 

The  features  will  provide  IT 
executives  with  base  collabora¬ 
tion  features  as  part  of  the  core 
of  Windows.Net  Server  and  let 
developers  embed  those  ser¬ 
vices  in  applications  designed 
for  the  platform. 

“This  changes  collaboration 
and  could  impact  many  users 
and  vendors  in  the  market,” says 
Matt  Cain,  an  analyst  with  Meta 
Group.  “When  Microsoft  starts 
to  embed  functionality  in  the 
[operating  system]  it  typically 
gets  used  by  IT  and  becomes  a 
commodity.” 

Some  IT  executives  say  the 
SharePoint  features  could  sim¬ 
plify  the  way  they  deploy  collab¬ 
oration  services. 

“This  looks  like  it  could  be 
used  to  replace  some  [collabo¬ 
ration]  features  on  an  intranet,” 
says  Rick  Riis,  MIS  director  for 
Encompass  Electrical  Technol¬ 
ogies,  which  provides  electrical 
wiring  services. “There  is  a  lot  of 


Windows  2000  Server 


Today,  building  a  shipping  application  that  lets 
people  share  documents,  calendars  and  to-do  lists 
requires  building  links  to  third-party  applications. 


Document 
sharing 

Windows.Net  Server 


With  Windows.Net  Server,  the  services  are 
in  the  operating  system,  making  development 
easier  and  performance  better. 


stuff  we  do  already  that  this 
could  replace.” 

But  adding  features  to  the  oper¬ 
ating  system  is  what  landed 
Microsoft  in  its  current  antitrust 
trouble  and  also  brought  criti¬ 
cism  of  Windows  XP  the  forth¬ 
coming  desktop  operating  sys¬ 
tem  that  includes  built-in  audio, 
video  and  instant-messaging 
capabilities. 

In  addition  to  SharePoint, 
Microsoft  said  it  is  developing  a 
Real-Time  Collaboration  (RTC) 
Server,  based  on  the  Session 
Initiation  Protocol  (SIP),  which 
will  unify  the  operating  system- 
based  collaboration  features 
with  voice,  video  and  instant 
messaging  for  delivery  to  any 
number  of  devices  over  any 


Solaris 

continued  from  page  12 

ministrators  reconfigure  system  components  while  the  system  is  still 
running. 

Solaris  customers  are  waiting  to  test  Version  9  with  their  applica¬ 
tions.  More  than  half  of  those  customers  use  Solaris  8  and  have  seen 
some  of  these  Solaris  9  features  added  as  patches  to  that  version. 

“We’ve  been  putting  Solaris  9  on  desktop  and  infrastructure  sys¬ 
tems,  and  running  them  under  their  old  job  loads  to  make  sure  we 
aren’t  experiencing  new  functions  with  old  functionality,”  says  Ian 
Batten,  IT  director  at  Fujitsu  Telecom.  Batten  has  50  SPARC  servers 
running  Solaris  8,  which  he  will  upgrade  to  the  new  version  when  it 
is  available. 

“One  of  the  key  things  we  want  to  look  at  is  the  snapshot  [feature]  in 
file  systems  for  our  databases,”  Batten  says. 

“The  snapshot  function  lets  us  look  at  much  faster  back-up  times  for 
our  databases,”  he  adds. 

In  snapshot  backups,  a  picture  of  the  file  system  is  taken,  allowing 
simultaneous  backup  of  active  data. 

But  the  feature  many  Solaris  users  are  asking  for  is  not  in  this 
release  as  the  default  desktop  —  that  is  Gnome.  Batten,  who  also  uses 
Linux,  looks  forward  to  using  Gnome  as  the  default  interface  for 
Solaris  and  Linux. 

“The  main  synergy  is  having  Gnome  available  for  Solaris,"  Batten 
says  “With  OpenWindows  dying,  the  movement  will  be  to  Gnome  as 
the  prevalent  desktop  for  both  Solaris  and  Unix.” 

A  Sun  spokesperson  says  Gnome  will  become  the  default  in  a  ver¬ 
sion  after  Solaris  9.The  Solaris  9  beta  version  can  be  downloaded  from 
www.su  n  com/solaris/  programs/solaris9ea. 

The  IDG  News  Service  contributed  to  this  story. 


links,  including  low-bandwidth. 
SIP  is  a  protocol  that  provides  IP 
telephony  services.  Microsoft  did 
not  specify  a  timetable  for  the 
release  of  RTC  Server. 

The  two  together  could  pro¬ 
vide  a  powerful  combination, 
and  with  the  use  of  Microsoft 
client  interfaces  —  Office  XP 
Microsoft  Instant  Messenger  or  a 
Web  browser  —  it  would  give  IT 
executives  a  range  of  collabora¬ 
tion  tools. 

It’s  all  part  of  Microsoft's  .Net 
plan  to  create  an  infrastructure 
to  support  the  delivery  over  the 
Internet  of  software  as  a  set  of 
Web  services,  chunks  of  reusable 
code  that  could  be  cobbled 
together  on  the  fly. 

But  it  also  has  ramifications  for 
IT  executives  and  the  current 
collaboration  market,  which  in¬ 
cludes  numerous  vendors,  such 
as  IBM/Lotus,  eRoom  Technol¬ 
ogies,  Intraspect  Software,  iMan- 
age  and  Groove  Networks. 

There  are  about  10  million 
users  of  team-based  collabora¬ 
tion  software,  according  to  mar¬ 
ket  research  firm  IDC.The  num¬ 
ber  is  expected  to  balloon  to  70 


I  THIS  WEEK'S  QUESTION: 

The  FCC  and  what  other 
organization  manage 
use  of  the  radio 
frequency  spectrum 
within  the  U.S.? 


Answer  tfis  and  noe  addtional  questions 
online  and  you  could  win  $500!  Visit 

Network  World  Fusion  and  enter  2349 
in  the  Search  box. 
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million  by  2005. 

“The  long  and  short  of  it  is  that 
collaboration  services  are  going 
to  be  written  into  applications 
instead  of  being  contained  in  a 
separate  application,”  Meta 
Group’s  Cain  says. 

With  SharePoint,  companies 
can  build  collaborative  applica¬ 
tions  without  having  to  deploy 
a  third-party  product.  For  exam¬ 
ple,  a  shipping  application 
could  add  calendar  and  docu¬ 
ment  sharing  features  just  by 
using  the  SharePoint  features  in 
Windows.Net.  That  also  could 
result  in  performance  gains 
because  the  application  would 
not  have  to  reach  out  to  a  sec¬ 
ondary  application  for  that  ser¬ 
vice. 

With  collaboration  services  in 
the  operating  system, customers 
already  licensing  Windows.Net 
server  may  find  that  running 
any  collaboration  applications 
similar  to  SharePoint  would 
amount  to  paying  twice  for  the 
same  features. 

Lotus  has  its  QuickPlace  and 
Sametime  servers  that  offer 
team  collaboration  and  real¬ 
time  collaboration.  Both  can  run 
on  Windows. 

Vendors  such  as  Groove  offer 
collaboration  based  on  a  peer- 
to-peer  model.  While  SharePbint 
isn’t  pure  peer-to-peer,  Micro¬ 
soft’s  instant  messaging  client  is 
a  peer-to-peer  application  that 
will  utilize  SharePbint  services. 

“What  they  have  proposed  with 
SharePoint  is  what  we’ve  been 
shipping  for  two  years  with 
Sametime  but  without  the  secu¬ 
rity  and  scalability,”  says  Mike 
Loria,  director  of  advanced  col¬ 
laboration  for  Lotus. 

“It  doesn’t  make  it  better  to  put 
it  in  the  [operating  system],"  he 
adds. 

While  SharePbint  might  not 
offer  all  the  rich  features  of  simi¬ 
lar  products,  it  may  provide  a 
good  enough  option  ■ 
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Introducing 
Authorization 
From  The 
Most  Trusted 
Name  in  e-SECURiTY" 

To  deliver  on  the  promise  of  e-business,  you  need  a  complete,  trusted 
online  environment.  This  means  knowing  who  you're  doing  business 
with  and  giving  them  access  to  the  right  resources.  That's  where  authori¬ 
zation  comes  in.  Authorization  empowers  organizations  to  safely  push 
their  business  processes  out  of  the  back  office  and  onto  the  Web,  where 
they  can  be  accessed  by  employees,  customers  and  partners.  Unleashing 
dramatic  cost  savings,  improved  customer  service,  stronger  relationships 
and  faster  response  to  a  rapidly  changing  business  environment. 

When  you're  ready  for  an  authorization  solution,  you  need  a  partner  you 
can  trust.  More  than  8,000  organizations  already  trust  RSA  Security  to 
deliver  e-security  solutions.  RSA  ClearTrust®  is  our  privilege  management 
and  user  access  solution  that  can  meet  your  authorization  needs.  To 
learn  more,  contact  RSA  Security,  the  most  trusted  name  in  e-security, 
at  800-495-1095  or  www.rsasecurity.com/go/cleartrust. 
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Free  white  paper! 

"Authorization:  Unified  Privilege  Management  Solutions  for  Secure  e-Business' 


Want  to  reduce  the  risks  and  reap  the  benefits  of  e-business  with  a  secure  Web  environment? 
Register  for  our  free  Web  security  seminar  at  www.rsasecurity.com/go/webportfolio/ 


RSA.  ClearTrust.  the  RSA  Secured  logo.  'The  Most  Trusted  Name  in  e- Security'  and  the  RSA  Security  logo  are  trademarks  or  registered  trademarks  or  RSA  Security  Inc.  All  other  trademarks  are  property  of  their  respective  owners.  02001  RSA  Security  Inc.  All  rights  reserved 
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Network  gear  a  strong-suit  for  new  HP 


■  BY  APRIL  JACOBS 

Users  may  face  some  uncertainty 
about  the  impact  of  the  Hewlett- 
Packard/Compaq  merger,  but  one  thing 
is  clear:  The  merged  company  will  not 
be  hurting  when  it  comes  to  providing 
basic  network  gear. 

John  McHugh,  general  manager  of 
HP’s  network  Infrastructure  Solutions 
Group,  says  after  the  acquisition  the 
company  will  continue  to  develop  and 
build  on  its  line  of  Layer  2  ProCurve 
switches  aimed  at  the  corporate  back¬ 
bone  and  wiring  closet,  though  he 
declined  to  mention  specifics. 

HP  is  also  expanding  into  the  Layer  3 
switch  market,  announcing  last  week  it 
will  partner  with  Foundry  Networks  to 
offer  gear  aimed  at  helping  network 
managers  track  and  control  costs.  “We 
are  a  rising  star  in  the  switch  market,  and 
we  intend  to  continue  to  grow  that  area,” 


McHugh  says. 

Indeed,  the  company’s  ProCurve  line 
of  switches  is  gaining  popularity  —  fig¬ 
ures  released  by  Dell’Oro  Group 
researchers  last  week  show  HP  has 
moved  from  11th  to  third  place  in  the 
Layer  2  10/100  Ethernet  switch  market. 
The  10/100  switch  market  makes  up 
approximately  60%  of  the  overall 
Ethernet  market  in  terms  of  revenue, 
according  to  Dell’Oro.  HP’s  port  ship¬ 
ments  grew  30%  from  the  first  quarter  of 
2001  to  the  second  quarter  of  2001, 
despite  an  overall  market  decline  of 
10%  during  the  same  period. 

HP’s  $20  billion  acquisition  of 
Compaq,  announced  last  month,  could 
have  significant  ramifications  for  users. 
Both  companies  have  formidable  server, 
desktop  and  mobile  computer  offerings 
that  overlap. 

Not  so  with  the  company’s  combined 
network  offerings,  however.  In  fact,  net¬ 


work  products  are  an  area  where  the 
acquisition  may  prove  complementary. 
While  Compaq  rid  itself  of  most  network 
products  when  it  sold  Digital’s  network 
gear  to  Cabletron  several  years  ago,  HP’s 
high-end  and  low-end  switch  products 
remain  viable,  says  Paul  Strauss,  an  ana¬ 
lyst  with  market  research  firm  IDC. 
Those  products  could  provide  a  com¬ 
plement  to  Compaq’s  very  limited  offer¬ 
ings,  which  include  modems  and  net¬ 
work  interface  cards. 

The  company’s  network  products  have 
also  been  getting  more  sophisticated  in 
recent  months.  And  experts  expect  that 
trend  to  continue.  For  example,  HP 
recently  released  OpenView  NT  — 
switch  management  software  for  con¬ 
trolling  a  network  of  HP  switches.  The 
ProCurve  4108,  announced  earlier  this 
year  and  aimed  at  midsize  backbones, 
had  some  important  features:  Gigabit 

See  HP,  page  22 


Network  strength 

If  the  HP/Compaq  merger  is 
approved,  the  new  HP  should  have 
a  stronger  network  offering. 
Here’s  some  reasons  why: 

Pricing: 

HP’s  ProCurve  family  is  gaining  ground 
on  traditional  Layer  2  switching  leader 
Cisco  by  using  low  per-port  pricing. 

Products: 

HP  has  a  full  line  of  Layer  2  switches 
that  it  has  been  bolstering  with  advanced 
features,  such  as  Gigabit  Ethernet  ports 
and  switch  management  software. 

Integration: 

Compaq  has  a  few  low-end  products 
that,  upon  completion  of  the  merger  with 
HP,  should  easily  be  integrated  into  the 
ProCurve  lineup. 


Takes 


Veritas  bolsters  back-up, 
disaster-recovery  software 


■  As  expected,  IBM  debuted  its  p690  high-end  Unix  server, 
formerly  code-named  Regatta,  last  week.  The  system  should 
help  IBM  catch  up  with  competitor  Sun,  analysts  say.  The 
p690  supports  up  to  32  Power4  processors  running  at  either 
1.1  GHz  or  1.3  GHz.  IBM  says  it  has  boosted  its  partitioning 
tools  for  the  p690,  making  it  possible  for  users  to  create  16 
virtual  partitions.  Users  can  run  AIX  5L  or  Linux  on  the  p690. 
IBM  has  also  built  in  a  network  of  sensors  to  help  the  p690 
detect  problems  in  internal  areas  such  as  the  memory  cache 
or  processors  and  automatically  shut  down  the  problem  area 
before  it  affects  the  whole  server.  A  p690  system  with  eight 
1.1-GHz  processors,  8G  bytes  of  memory  and  36.4G  bytes  of 
storage  starts  at  $450,000.  A  more  powerful  model  with  16 
processors  and  16G  bytes  of  memory  starts  at  $760,000, 
compared  with  a  Sun  Star  Fire  15K  in  a  similar  configuration 
for  $1.4  million,  IBM  says,  www.ibm.com 

■  Legato  last  week  rolled  out  software  that  lets  customers 
recover  operating  systems,  applications  and  data  from 
Windows  NT  servers  in  the  event  of  a  hardware  failure. 
Legato's  NetWorker  Recovery  Manager  1.0  software  restores 
complete  images  of  computers  from  a  Wizardlike  interface. 
Legato  NetWorker  Recovery  Manager  saves  an  image  of  the 
operating  system  and  application  to  a  CD  for  recovery.  The 
software  starts  at  $700  per  server  and  is  available  now. 
www.legato.com 


■  BY  DENI  CONNOR 

Storage  software  vendor  Veritas 
last  week  unveiled  a  variety  of  soft¬ 
ware  packages  that  should  help 
customers  recover  data  lost 
through  disaster,  data  corruption 
or  other  means,  and  keep  that  data 
available  for  critical  operations. 

The  company  is  adding  three 
products  to  its  range  of  back-up, 
clustering,  storage  management 
and  disaster-recovery  software  for 
Unix,  Windows  2000  and  NT,  Net¬ 
Ware,  Oracle  and  DB2  environ¬ 
ments.  The  products  are: 

•  Veritas  FlashSnap:  back-up 
software  that  lets  IT  managers 
take  point-in-time  copies  of  disk 
data  for  recovery  in  the  event  of 
error  or  for  availability  for  other 
applications  or  testing. 

•Veritas Volume  Replicator:  a  ut¬ 
ility  that  immediately  copies  data 
to  remote  locations  for  disaster 
recovery  so  users  can  quickly  re¬ 
cover  lost  data. 


•  Veritas  Database  Edition  for 
DB2:  software  that  protects  IBM 
databases  from  corruption  and 
data  loss  and  optimizes  the  stor¬ 
age  resources  in  DB2  by  combin¬ 
ing  the  disk  resources  into  a  sin¬ 
gle  pool  of  data  so  the  resources 
can  be  managed  more  easily. 

Veritas  FlashSnap  lets  cus¬ 
tomers  take  up  to  32  pictures  or 
images  of  stored  data  at  any 
point  in  time  and  move  that  data 
to  another  location  on  the  disk. 
After  the  initial  image  of  the  data 
is  taken, only  data  that  changes  is 
sent  to  the  next  snapshot.  These 
images  let  users  back  up  their 
systems  without  disrupting  oper¬ 
ations  or  make  a  second  copy  of 
the  data  available  for  testing  or 
decision  support  applications. 

“The  strongest  need  for  [snap¬ 
shot  backups]  is  in  relatively  live 
database  backups,"  says  George 
Herbert,  an  IT  consultant  work¬ 
ing  at  a  large  financial  institution 
in  San  Francisco.  “You  quiesce 


the  database  activity  for  a  few 
seconds,  wait  for  the  file  system 
pending  writes  to  happen  and 
then  snapshot  the  database  file 
system.  [Snapshot  backups] 
work  quite  well  and  are  a  good 
trade-off  for  back-up  intervals 
and  service  interruptions  during 
the  day”  says  Herbert,  who  man¬ 
ages  about  30  Solaris  servers. 

FlashSnap  runs  on  Sun  Solaris 
servers;  it  will  support  Hewlett- 
Packard’s  HP-UX,  AIX  and  Win 
2000  and  NT  servers  within  six 
months.  The  software  also  runs 
on  virtually  any  direct-attached 
storage  device  or  Fibre  Channel 
storage  array,  including  Sun,  HR 
EMC  and  Hitachi  Data  Systems. 

FlashSnap  requires  that  Veritas 
Volume  Manager,  an  online  disk 
and  storage  management  software 
component,  be  resident  on  the 
system.  FlashSnap  has  a  Java- 
based  interface,  letting  IT  man¬ 
agers  manage  the  snapshot 
See  Veritas,  page  22 
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worked  for  a  Midwest-based 

■ 

humming  nicely  along  with  ten  accounts 


you  were  greeted  by  an  e-mail  announcing  that  you  just  landed  a  new  piece  of  business— which  happens 

to  be  bigger  than  those  same  ten  accounts  combined. 

What's  at  the  top  of  todays  to-do  list?  Figure  out  how  to  expand  your 
supply  chain  and  create  distribution  channels  to  service  all  of  your  clients  retail 
locations  around  the  world.  And  could  you  do  it  by  tomorrow,  thank  you? 

Hopefully,  you've  got  an  infrastructure  that's  built  on  technology  that 
works  around  your  needs,  not  the  other  way  around.  It  should  be  standards- 
based,  so  you're  limiting  your  risk.  Adaptable,  so  you  can  quickly  adjust  to 
change.  Reliable,  so  you're  up  and  running  without  a  hitch. 

At  HP,  we  engineer  infrastructure  that  starts  with  you— your  business, 
your  issues,  your  opportunities.  So  you  can  easily  respond  as  your  business 
expands,  contracts  or  takes  off  in  new  directions. 

Servers  that  are  designed  to  address  the  critical  nature  of  an  always- 
on  Internet  infrastructure.  Software  that  puts  your  entire  network  within  easy 
reach  of  your  keyboard.  Storage  that  enables  you  to  transparently  scale  your 
capacity.  Service  professionals  to  help  you  quickly  design  and  deploy  flexible 
solutions  and  infrastructures.  As  well  as  the  support  resources  to  help  keep 
them  running  24/7 

HP  infrastructure  solutions  are  based  in  the  real  world  of  business. 
Because  the  last  time  we  checked,  that's  where  we  all  work.  Call  1.800.HPASKME, 
ext.  246.  Or  visit  hp.com/go/infrastructure. 

Infrastructure:  it  starts  with  you. 
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“ Cable  companies  have  among  the  low¬ 
est  satisfaction  rankings  of  any  service 
provider,  lower  than  those  for  computer 
technical  support .” 

—  TV  critic  Diane  Holloway,  Austin 
(Texas)  American-Statesman,  Sept.  29 

My  PC  refused  to  boot  last  week,  so  it 
seemed  an  excellent  time  to  test 
the  vendor’s  technical  support 
quality,  timeliness  and  —  as  it  turned  out 
—  relevance.  See  “Tech  support  scorecard” 
(www.nwfusion.com,  DocFinder:  6329)  for 
my  last  look  at  vendors  and  support. 

First,  a  little  background.  1  was  surfing 
the  Web  doing  research  for  an  upcoming 
article  when  1  started  getting  404  errors 


Suffering  with  service  absurdity 


(page  not  found)  for  every  site  I  wanted 
to  visit.  My  Internet  connection  was  fine 
(my  mail  client  was  working,  ping  was 
happy)  so  I  decided  to  reboot  to  clean 
up  RAM.  Big  mistake.  After  initializing  my 
SCSI  card,  the  PC  threw  up  a  white-on- 
black  error  screen  (“Exception  TRAP 
00000006”). 

My  usual  sources  provided  little  help  — 
neither  books  nor  Web  sites  (even  a 
Google  search)  turned  up  the  message. 
Well,  Google  did  find  one  reference,  but 
that  page  was  “no  longer  available.”  Time 
to  head  for  Dell’s  Web  site  for  help.  Why 
didn’t  I  call?  Because  1  wanted  to  try  out 
the  nontelephone  options. 

Dell  has  an  option  called  “e-mail  Dell,” 
letting  you  e-mail  a  problem  report. 
Unfortunately,  the  model  I  have  (a 
Workstation  400)  was  evidently  only 
made  for  a  couple  of  days  and  never 
shows  up  on  the  choice  menus.Of  course, 
because  you  always  need  to  provide  the 
service  tag  ID  (a  label  on  the  machine 
which  identifies  its  configuration),  the 


support  people  should  know  what  type  of 
PC  it  is,  shouldn't  they? 

Nevertheless,  we  spent  more  than  24 
hours  (two  e-mail  exchanges)  identifying 
the  model  of  PC  I  had.This  after  specifying 
the  service  tag  ID,  the  exact  error  message 
(including  the  contents  of  registers  and 
the  instruction  pointer).  Still  no  sugges¬ 
tions  offered,  though. 

The  initial  message  indicated  I  was 
using  Windows  2000  professional  as  an 
operating  system.  Message  No.  4  from 
Dell  inquired  as  to  the  operating  system 
I  was  using  —  and  suggested  1  upgrade! 
However,  it  contained  a  pointer  to  a  diag¬ 
nostic  program,  which  1  downloaded. 

The  diagnostic  indicated  no  hardware 
problems,  so  I  simply  reinstalled  Win  2000 
and  everything  appears  to  be  back  to  nor¬ 
mal.  But  no  thanks  to  Dell,  which,  after  36 
hours,  had  still  not  addressed  the  error 
message  I  provided.  What’s  the  point  of 
detailed  error  messages  if  no  one  can 
interpret  them?  Vendor  support  seems  as 
dismal  as  ever,  or  maybe  a  little  worse. 


WWW. 


nwfusion.com  | 


Kearns,  a  former  network  administrator,  is 
a  freelance  writer  and  consultant  in 
Austin,  Texas.  He  can  be  reached  at 
wired@vquill.  com. 


Tip  of  the  Week 


Vendor  support  may  be 
bad,  but  peer  support  is 
better  than  ever.  Volunteers 

such  as  Microsoft's  MVPs  or 
Novell's  Novell  Support  Con¬ 
nection  Volunteers  provide 
the  fastest,  most  accurate 
response  to  standard  sup¬ 
port  questions  and  the  most 
innovative  response  to  real 
quandaries.  Visit  the  vendor 
Web  sites  and  navigate  to 
the  support  news  groups  for 
really  good  answers. 
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continued  from  page  17 

process  from  any  location  with  a  browser. 

Other  vendors  have  also  introduced 
snapshot  back-up  software.  Legato  has 
Snaplmage  for  network-attached  storage 
devices;  EMC  has  SnapView  and  Snap- 
View/IP  for  its  CLARiiON  line  of 
midrange  storage,  which  lets  up  to  92 
snapshots  exist  on  a  system;  Network  Ap¬ 
pliance  has  SnapMirror  and  SnapRestore 
for  its  file  servers,  which  can  make  up  to 
20  images  available  at  a  time. 

Veritas  also  announced  an  enhanced 
version  of  Volume  Replicator,  which  lets 
companies  move  data  to  remote  loca¬ 
tions  for  disaster  recovery  or  data  migra¬ 
tion  applications.  The  software  features 
the  ability  to  quickly  restore  data  to  the 
primary  data  location  after  a  failure 
occurs. 

The  company  has  also  reduced  the 
operations  necessary  to  replicate  data 
with  a  Wizard-like  interface  and  added 
support  for  priority  queueing.  In  priority 
queuing,  an  IT  manager  is  able  to  dele¬ 
gate  bandwidth  to  particular  customers 
or  users  by  importance.  Volume  Repli¬ 
cator  uses  IP  for  communication  be¬ 
tween  devices  and  works  with  existing 
communications  hardware.  Like  Flash- 
Snap,  Volume  Replicator  requires  Veritas 
Volume  Manager.  It  runs  on  Solaris  and 
HP-UX  and  is  in  beta  test  on  Win  2000 
and  AIX-5L. 

The  company  also  introduced  two  soft¬ 
ware  packages  for  users  of  IBM’s  DB2 
Universal  Database  running  on  Sun 
Solaris  servers. The  first, Veritas  Database 
Edition  for  DB2,lets  IT  managers  collect 
disparate  storage  resources  under  one 
management  system  to  boost  perfor¬ 
mance  and  ensure  availability.  It 
includes  a  feature  that  ensures  fast 
recovery  of  DB2  data  and  supports 


online  disk  maintenance.  It  also  incor¬ 
porates  snapshot  technology  to  boost 
back-up  speeds. 

The  second  package,  Veritas  Database 
Edition/HA,  adds  server-clustering  capa¬ 
bility  that  lets  one  server  fail  over  to 
another  in  the  event  of  a  problem.  The 
idea  is  to  eliminate  unplanned  down¬ 
time  of  database  servers. 

Veritas  supports  similar 
products  for  Oracle  and 
Sybase  databases. 

Veritas  FlashSnap  starts  at 
$3, 000;  Version  3.2  of  Veritas 
Volume  Replicator  starts  at 
$9,000.  Both  products  are 
available  immediately. 

Version  1.0  of  Veritas 
Database  Edition  for  DB2 
and  Veritas  Database 
Edition/HA  for  DB2  are 
available  this  month,  start¬ 
ing  at  $6,400. 

Veritas:  www.veritas.com 


Veritas'  FlashSnap 

FlashSnap  provides  up  to  32  point-in-time  snapshot  copies  of  applications. 
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To  start  the  snapshot, 
a  user  pulls  down  the 
Volumes  menu  and 
selects  Snap,  then 
SnapStart.  An  image 
of  the  application  data 
will  be  made  available 
for  back-up  purposes 
or  decision-support 
applications. 
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Once  the  desired  data  volume  of  the 
point-in-time  snapshot  is  selected, 
the  user  can  start  the  process. 
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copper  ports  and  switching  intelligence 
distributed  to  the  connectivity  modules 
instead  of  a  centralized  processing 
blade.  Low  price  is  still  HP’s  primary 
weapon,  observers  say.  For  example,  the 
4180  has  10/100M  bit/sec  ports  for  as  lit¬ 
tle  as  $135  each.  Cisco’s  Catalyst  4006 
comes  in  at  about  $215  per  port. 

HP’s  product  line  ranges  from  high-end 
dense  router  switches  such  as  the 
$17,000  ProCurve  9308m,  which  features 
64  Gigabit  Ethernet  or  168  Fast  Ethernet 
ports,  down  to  wiring  closet  gear  such  as 
the  $630  ProCurve  2312,  which  features 
just  12  Fast  Ethernet  ports. 

As  for  the  Foundry  partnership,  it 
should  help  corporate  customers  more 


easily  manage  and  account  for  network 
usage.  HP  and  Foundry  say  they  will 
bundle  HP’s  Internet  Usage  Manager 
Software  with  Foundry’s  combined 
Velocity  Management/Biglron  Layer  3 
switch.  The  bundle  gives 
users  a  way  to  account  track 
and  analyze  network  usage 
costs  on  their  networks. 

Observers  say  HP’s  move 
into  the  Layer  3  market  is 
important  because  it  pro¬ 
vides  users  with  more 
sophisticated  network  prod¬ 
ucts  designed  to  help  them 
control  costs. 

HP’s  existing  Layer  2 
ProCurve  switch  products 
compete  with  offerings  from 
Cisco,  Nortel  and  3Com. 


HP’s  high-end  Layer  2  ProCurve 
2524  switch  is  comparable  to  Cisco’s 
Catalyst  3500  (3524)  Series  switch  and 
3Com’s  SuperStack  II  Switch  3300  TM, 
observers  say. 

HP’s  strategy  in  selling  its 
network  products  is  very 
similar  to  the  one  carried 
out  by  hardware  giant  IBM 
—  until  it  sold  off  its  network 
business  to  Cisco  a  few  years 
ago,  says  Bill  Lesieur,  an  ana¬ 
lyst  with  Technology  Bus¬ 
iness  Research  Group.  That 
strategy  called  for  IBM’s 
brand-name  network  prod¬ 
ucts  to  be  sold  as  comple¬ 
ments  to  IBM’s  server  and 
desktop  core  line. 

HP:  www.hp.com 


More  online! 


More  on  the 
HP/Compaq  merger. 
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•  Nokia  Internet  Communications  Inc.  2001.  All  rights  reserved.  Nokia  and  Nokia  Connecting  People  are  registered  trademarks  of  the 
Nokia  Corporation.  Other  product  and  company  names  mentioned  herein  may  be  trademarks  or  trade  names  of  their  respective  owners. 


"Nokia  led  the  parade. ..in  the  firewall/VPN  security  appliance  market." 

— IDC,  June  2001 


"Closer  to  high-availability  nirvana  than  any." 

-Network  World,  December  11,  2000 


"The  Nokia  IP530  is  truly  the  best-of-breed  platform  in  the  firewall  market." 

—Information  Security  Magazine,  September  2001 


"A  formula  for  earning  our  Editors'  Choice." 

-PC  Magazine,  September  25,  2001 


"Easy  to  install  and,  more  important,  easy  to  restore." 

-Network  Computing,  May  14,  2001 


EJetworki 
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You  don’t  have  to  take  our  word  for  it.  Nokia  firewalls  and  VPNs  are  the  preferred  choice  of  IT  departments  and 
third-party  reviewers  everywhere.  To  find  out  more,  visit  us  at  www.nokia.com/internet/na.  Welcome  to  the  real  world. 
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Put  an  end  to  lost  data  with  the 
MaxAttach™  NAS  4300  file  server 
from  Maxtor.  Only  the  MaxAttach 
4300  with  Persistent  Storage 
Manager  (PSM)  attaches  to  your 
network  via  Ethernet  and  auto¬ 
matically  takes  snapshots  of  your 
file  system  as  often  as  you  tell  it 
to.  Making  data  recovery  easier 
than  ever.  And  like  all  of  our  NAS 
4000  Series  products,  it  provides 
disk  storage  for  the  cost  of  tape. 
So  while  profanity  won't  bring 
your  data  back,  the  new 
MaxAttach  4300  will.  Compare 
the  MaxAttach  4000  Series  to 
other  storage  solutions  with  the 
MaxAttach  Storage  Calculator 
at  www.maxtor.com/ma320  or 
call  1-800-240-9201. 
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NETWORK  STORAGE  YOU  CAN  USE 
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•  400GB  capacity 

•  PSM  snapshot  capability 

•  Gigabit  &  10/100  Ethernet 
P  •  $5,999  MSRP 
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■  INTRANETS  ■  MESSAGING/GROUPWARE 

■  E-COMMERCE  ■  SECURITY  ■  VPNs 

■  NETWORK  MANAGEMENT  ■  DIRECTORIES 


Site: 


Lessons  from  Leading  Users 


J.D.  Edwards  tackles  integration  project 


■  BY  JOHN  FONTANA 

Every  Microsoft-based  corporation  has  heard 
about  the  challenges  of  deploying  Active 
Directory.  And  the  challenge  only  gets  deeper 
when  coupled  with  Exchange  2000,  which  must 
have  the  directory  in  order  to  operate. 

Software  developer  J.D.  Edwards  took  on  the  chal¬ 
lenge  before  both  products  were  released  and  will 
soon  flip  the  switch  on  its  internal  network  for  the 
first  set  of  live  users  on  Exchange  2000.The  project  is 
part  of  a  company  mandate  to  stay  on  the  leading 
edge  of  Microsoft  technology  because  it  benefits  the 
development  of  J.D.  Edwards’ software. 

The  Exchange  upgrade  is  the  culmination  of  an 
infrastructure  upgrade  project  begun  nearly  two 
years  ago  that  combined  Active  Directory,  which  has 
been  live  on  the  network  for  a  year,  and  Exchange 
2000. 

“Exchange  and  Active  Directory  were  considered 
at  the  same  time  because  our  Exchange  infrastruc¬ 
ture  is  the  Active  Directory  infrastructure,”  says  Jeff 
Andersen,  collaborative  services  manager  for  the 
company. That  attitude  reflects  how  intertwined  the 
two  are,  and  it  was  key  to  the  success  of  the  rollout. 

Currently  the  company  has  a  mixed  environment 
of  Exchange  5.5  and  2000,  but  when  the  switch  is 
made  to  Exchange  2000  it  will  increase  the  reliabili¬ 
ty  of  the  Exchange  network,  improve  remote  access 
and  ease  maintenance  chores. 

However,  to  get  to  that  point  Andersen  and  the  IT 
staff  had  to  learn  a  new  set  of  tools  and  administra¬ 
tive  processes. They  spent  hours  in  the  lab  devising 

See  J.D.  Edwards,  page  28 


Makeover 


J.D.  Edwards  is  set  to  switch  to  an  Exchange  2000  environment  that 
it  hopes  will  ease  management  of  the  messaging  system  and  improve 
features  such  as  Web  access.  Currently,  the  company  operates 
Exchange  5.5  and  2000  in  “mixed  mode”. 


Present:  Mixed  environment  with  Exchange  5.5  and  2000  Exchange  5.5 


Asia 


Europe/ 

Middle 

East 


Mixed  environment 

With  a  mixture  of 
Exchange  5.5  and  2000, 
J.D.  Edwards  must 
maintain  connectors 
and  replication  services 
between  the  two 
systems  and  to  Active 
Directory.  Also,  user 
administration  must  be 
done  on  each  server. 


Future: 

Native  environment  with  Exchange  2000 

Active  Directory  infrastructure 
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32  servers 
Windows  2000 


Three  servers 
Exchange  2000 
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10  servers 
Exchange  2000 
North  America 
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Two  servers 
Exchange  2000 
Europe/ 

Middle  East 


Native  environment 

With  servers  converted  to 
Exchange  2000,  maintenance  of 
connectors  and  replication 
services  is  eliminated,  users  are 
managed  centrally  through 
Active  Directory,  and  the  number 
of  servers  is  reduced  because  of 
improved  maintenance  and 
Outlook  Web  access  support  in 
Exchange  2000. 


Takes 

■  In  an  effort  to  help  companies  stem  the  flow  of  inap¬ 
propriate,  confidential  or  virus-infected  e-mail  messages 
moving  through  their  networks,  Symantec  last  week 
announced  Symantec  AntiVirus/Filtering  for 
Microsoft  Exchange  2000,  an  integrated  virus  and 
content-scanning  package  for  the  Microsoft  e-mail  serv¬ 
er.  The  software  can  scan  incoming  and  outgoing  e-mail 
messages  for  viruses  and  worms.  Additionally,  to  help 
combat  the  mass-mailer  worms  that  cause  trouble  and 
consume  bandwidth  at  many  companies,  the  software 


also  includes  “outbreak  management”  features.  These 
features  let  administrators  define  acceptable  levels  of 
mail  use,  and  the  system  automatically  triggers  alerts 
and  other  actions  when  it  suspects  that  a  worm  out¬ 
break  may  be  occurring.  The  software  ships  Dec.  3  and 
will  cost  $29  per  node  for  a  2,000-node  license,  www. 
symantec.com 

■  Arbor  Networks  announced  an  upgrade  to  its  Peak- 
Flow  denial-of-service  protection  equipment,  adding  a 
promiscuous-mode  packet  sniffer  and  improved  man¬ 
agement  in  event  collection.  Arbor  Networks,  which  had 
been  offering  its  anti-DDoS  gear  as  a  managed  service 
for  ISPs,  now  also  intends  to  sell  PeakFlow  DoS  1.5 


equipment  directly  to  enterprise  customers  for  approxi¬ 
mately  $130,000.  www.arbornetworks.com 

■  Siebel  Systems  last  week  announced  plans  to  buy 
nQuire  Software,  a  privately  held  company  that 
makes  business  analytics  software.  From  nQuire,  Siebel 
gains  an  analytic  engine  that  supports  self-service 
searches  and  event  notification,  with  an  emphasis  on 
wireless  and  voice  delivery.  Siebel  said  it  will  integrate 
and  ship  nQuire’s  analytic  server  and  Web  products  with 
Siebel  7,  its  200-module  CRM  application  suite.  Siebel 
did  not  reveal  a  timeline  for  integrating  the  nQuire  prod¬ 
ucts  into  its  suite,  and  financial  details  were  not  dis¬ 
closed.  www.seibel.com 
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Dirig  pack 
to  manage 
IBM  apps 

■  BY  DENISE  DUBIE 

NASHUA,  N.H. —  Ding  Software 
last  week  announced  it  added  to 
its  applications  management  soft¬ 
ware  support  for  IBM’s  DB2 
Universal  Database  and  Web¬ 
Sphere  Commerce  Suite,  which 
will  let  users  collect  performance 
data,  such  as  response  time  and 
latency  on  each  transaction  per¬ 
formed  on  their  Web  site. 

The  software,  called  Fenway, 
can  now  monitor  the  perfor¬ 
mance  on  transactions,  such  as 
credit  card  verification,  inventory 
confirmation  or  data  delivery  on 
IBM  WebSphere-based  ebusiness 
environments,  the  company  says. 
Fenway  can  monitor  elements 
specific  to  Web  applications  such 
as  Enterprise  JavaBeans,  servlets 
and  connection  pools.  Web¬ 
Sphere  Commerce  Suite  is  IBM’s 
range  of  e-commerce  products. 

Meta  Group  analyst  Corey  Fer- 
engul  says  Dirig,  along  with  ven¬ 
dors  such  as  Precise,  is  respond¬ 
ing  to  the  growing  user  demand 
to  manage  IBM  WebSphere  and 
BEA  Systems  Web  applications. 
Fenway  can  already  manage 
BEA  Web  application  servers. 

“WebSphere  is  a  black  box 
right  now.  Out  of  the  box,  it 
doesn’t  have  the  tool  set  to  get 
the  broader  type  of  data  people 
need  to  manage  those  applica¬ 
tions,”  Ferengul  says.  He  says  the 
tools  provided  with  WebSphere 
do  not  offer  the  historical  mon¬ 
itoring  and  real-time  alerting  as 
“deeply  as  Fenway”  can. 

Fenway  is  a  software  agent  that 
is  installed  on  the  server  it  man¬ 
ages.  It  can  be  configured  to  mon¬ 
itor  several  applications.  Users 
can  view  the  performance  data  in 
real  time  via  the  built-in  Web 
interface  on  each  Fenway  agent. 
Users  can  choose  to  have  Fenway 
export  the  data  it  collects  to  a 
third-party  management  console 
such  as  Micromuse’s  NetCool. 

Users  need  to  also  purchase 
Dirig's  Specific  Application  Man¬ 
ager  (SAM)  to  manage  IBM’s  DB2 
Universal  Database. 

Available  now,  Fenway,  with 
support  for  WebSphere  Com¬ 
merce  Suite,  costs  $4,500  per 
agent.  The  SAM  for  DB2  costs 
$3,000  per  server.  Fenway  works 
with  Windows  NT  and  2000, 
Solaris  HP-UX  and  AIX  platforms. 

Dirig:  www.dirig.com 


SolidWorks  enhances  CAD  e-mail 


■  BY  CAROLYN  DUFFY  MARSAN 

CONCORD,  MASS.  —  CAD  software  vendor 
SolidWorks  this  month  will  ship  an  en¬ 
hanced  version  of  its  eDrawings  software  for 
sending  complex  two-dimensional  engineer¬ 
ing  drawings  as  e-mail  attachments. 

Manufacturing  companies  that  use  Solid- 
Work’s  CAD  package  or  rival  AutoDesk’s  Auto¬ 
CAD  package  can  use  the  new  version  of 
eDrawings  to  collaborate  with  their  customers 
and  suppliers  on  engineering  drawings  with¬ 
out  the  customers  needing  to  own  eDrawings. 

EDrawings  is  a  compressed  file  format  with 
a  built-in  viewer  that  is  available  free  at  Solid- 
Works’Web  site.The  client  software  works  with 
CAD  packages  from  SolidWorks  and  Auto- 
Desk  and  any  Microsoft’s  messaging  API-com¬ 
pliant  e-mail  offering.  Available  since  1999, 
eDrawings  has  been  downloaded  by  more 
than  95,000  CAD  users. 

With  eDrawings  2.0,  SolidWorks  has  rewrit¬ 
ten  the  software  using  a  new  three-dimen¬ 
sional  application  framework  called  HOOPS 
that  supports  streaming  graphics  and  provides 
improved  print  quality 

SolidWorks  is  offering  two  versions  of 
eDrawings  2.0: 

•  eDrawings  Viewer,  a  free  version  that  lets 
users  view  and  print  eDrawings. 
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PROFILE: 

SOLIDWORKS 

Concord,  Mass. 

Founded: 

1993 

Products: 

SolidWorks  2001  3-D 
mechanical  design 
software,  eDrawings  2.0 
e-mail  software. 

CEO: 

Jon  Hirschtick 

Ownership: 

A  division  of  Dassault 
Systemes. 

Sales: 

145,000  software  seats 
shipped  since  inception. 

Customers: 

Manufacture-based 

companies. 

•  eDrawings  Professional,  which  includes 
additional  mark-up,  measurement  and  view¬ 
ing  tools  and  costs  $1,000. 

The  main  feature  of  eDrawings  Profes¬ 
sional  is  that  it  lets  the  user  create  and  send 
review-enabled  eDrawings.  The  recipient  of 
those  eDrawings  can  mark  them  up  and 
send  them  back  without  owning  eDrawings 
Professional.  This  version  also  lets  the  user 
send  an  eDrawing  with  or  without  the  mea¬ 


surement  capability  enabled,  depending  on 
security  needs. 

Canadian  Tool  and  Die,  a  manufacturer  of 
wheels,  hubs,  spindles  and  hydraulic  cylin¬ 
ders  in  Winnipeg,  Canada,  has  been  testing 
eDrawings  Professional  for  several  months. 
The  custom  machining  company  uses  the 
software  to  e-mail  diagrams  to  its  customers 
instead  of  sending  documents  by  fax  or 
overnight  mail. 

“I  e-mail  our  customers  a  quote  and  an 
eDrawing  as  an  .exe  file  so  they  can  open  it  up 
and  review  it,"  says  Patrick  Crooks,  an  engi¬ 
neering  technician  with  Canadian  Tool  and 
Die. “The  measure  feature  comes  in  handy  We 
put  basic  dimensions  on  our  drawings,  but 
that  feature  allows  them  to  get  more  details.” 

Crooks  says  eDrawings  Professional’s  perfor¬ 
mance  is  very  good,  but  that  the  files  are 
larger  than  they  were  when  compressed  using 
the  original  version  of  eDrawings. 

SolidWorks  will  target  eDrawings  Profes¬ 
sional  at  the  130,000-plus  users  of  its 
SolidWorks  2001,  a  three-dimensional  mech¬ 
anical  design  software  package.  No  direct 
competitor  to  eDrawings  exists,  but  alternative 
ways  of  sharing  large  engineering  documents 
include  setting  up  a  FTP  Web  site  or  sending 
the  documents  via  fax  or  overnight  mail. 

SolidWorks:  www.solidworks.com 


MetiLinx  manages  server  resources 


route  traffic,  the  company  says. 

1DC  analyst  Dan  Kusnetsky  says 
enterprise  users  could  potentially 
save  time  and  money  by  imple¬ 
menting  MetiLinx  because  the 
OMS  software  is  easy  to  use  and 
watches  “each  and  every  distrib¬ 
uted  component”  on  a  network. 
He  says  many  network  tools  de¬ 
signed  for  optimizing  network 
performance  only  work  with  one 
element  at  a  time.  The  company 
boasts  research  showing  it  can 
save  customers  an  average  of  35% 
in  hardware  costs  and  50%  in  sup¬ 
port  costs. 


Users  can  see 
real-time  perform¬ 
ance  statistics, 
such  as  network 
response  time,  as 
well  as  resource 
availability  and 
utilization. 


MetiLinx  soft¬ 
ware  can  per¬ 
form  the  same 
tasks  as  job 
scheduling, 
event  auto¬ 
mation,  perfor¬ 
mance  and 
configuration 
management,  clus¬ 
tering  and  high-availability,  and 
Web  caching  and  acceleration 
softwares,  Kusnetsky  says.  But  it 
does  so  with  one  tool,  and 
aggregates  the  data  in  one  con¬ 
solidated  view. 

MetiLinx  competes  with  compa- 


■  BY  DENISE  DUBIE 

MetiLinx  this  week  will  unveil 
software  the  company  says  will 
let  users  re-engineer  their  net¬ 
works  for  better  performance  and 
do  away  with  load  balancing  by, 
for  example,  finding  unused 


capacity  on  servers  and  running 
two  or  three  applications  on  each 
server,  rather  than  just  one. 

MetiLinx’s  iSystem  Enterprise 
Optimization  and  Manageability 
Solution  (OMS)  software  moni¬ 
tors  network  traffic  and  server 
utilization  to  automatically  re- 


Optimizing  the  network 

MetiLinx’s  iSystem  Enterprise  Console  lets  users  view  their 
network  and  administer  corrective  action. 


The  'load  monitor’  view  shows  users 
the  levels  of  processing  capability 
being  utilized  on  servers. 
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nies  such  as  Platform  Computing 
and  Precise,  he  says. 

OMS  is  installed  on  a  dedicated 
server,  and  software  agents  are 
deployed  on  each  server  that  is  to 
be  managed.* 

Those  agents,  or  system-level 
objects,  communicate  with  each 
other  through  a  peer-to-peer  con¬ 
nection.  The  objects  can  report 
on  more  than  400  hardware  and 
software  metrics, such  as  disk  and 
CPU  utilization;  network  response 
time;  and  latency 

OMS  includes  MetiLinx’s  Ana¬ 
lysis  and  Diagnostics  Tool  (ADT), 
which  collects  real-time  network 
and  system  performance  data. 
The  software  then  aggregates  the 
data  collected  by  the  system-level 
objects  and  can  take  automated 
action  to  reroute  traffic  to  opti¬ 
mize  the  network  resources 
based  on  rules  predefined  by  the 
network  administrator. 

OMS  costs  $2,000  per  server, 
and  includes  MetiLinx’s  ADT. 
ADT  can  be  sold  separately  for 
$1,000  per  server.  MetiLinx  OMS 
and  ADT  software  works  with  all 
Windows,  Sun  Solaris  and  Linux 
operating  systems. 

MetiLinx:  www.metilinx.com 
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For  many  years  the  phone  system 
could  give  special  handling  to  sel¬ 
ected  phone  calls. 

This  feature  is  designed  to  be  used  in 
times  of  emergency  by  medical  services, 
some  government  officials,  firefighters, 
police  and  some  industry  emergency  re¬ 
sponse  teams.  A  year  or  two  ago  some 
people  started  trying  to  figure  out  how  to 
provide  emergency  services  over  the 
Internet. 

The  experiences  in  the  aftermath  of  the 
events  of  Sept.  1 1  made  thinking  about 


Emergency  service  in  a  best-effort  world 


this  both  more  and  less  important. 

The  current  system  in  the  U.S.is  known  as 
The  Government  Emergency  Telecom¬ 
munications  Service.  This  PIN-based  sys¬ 
tem  provides  expedited  handling  of  call 
requests,  but  does  not  include  preemption 
of  calls  already  in  progress.  It  is  provided  by 
telephone  companies  under  a  government 
fee-for-service  contract. 

Clearly,  with  the  movement  toward  con¬ 
verged  networks,  it  makes  sense  to  look 
at  the  impact  of  emergencies  on  vital 
Internet-based  services.  But  just  under¬ 
standing  what  vital  services  might 
encompass  on  the  Internet  is  not  easy.  In 
the  phone  world  there  is  basically  one 
service:  a  fixed-bandwidth  voice  call. 
With  the  Internet,  there  are  hundreds  of 
applications  that  might  be  important 
when  responding  to  emergencies. 
Dealing  with  each  application  individu¬ 


ally  would  be  a  daunting  task,  made  all 
the  harder  by  the  people  that  keep  cre¬ 
ating  new  applications. 

One  proposal  that  is  being  discussed  by 
the  Internet  Engineering  Task  Force,  the 
Telecommunication  Standardization  Sec¬ 
tor  of  the  International  Telecommuni¬ 
cations  Union  and  European  Telecom¬ 
munications  Standards  Institute  is  based 
on  the  International  Emergency  Pre¬ 
paredness  Scheme  (www.iepscheme.net). 
As  you  can  see  by  looking  at  the  mailing 
list  archives  reachable  through  the  Web 
page,  this  proposal  has  created  some  spir¬ 
ited  discussions. 

Much  of  the  discussion  concerns  the 
fundamental  differences  between  the  cir¬ 
cuit-based,  guaranteed  quality  access  con¬ 
trolled  phone  network  and  the  packet- 
based,  best-effort  Internet  as  well  as  what 
did  and  did  not  happen  on  Sept.  11.  The 


Internet  infrastructure  did  not  collapse 
that  day,  but  many  Web  servers  and  some 
tail  circuits  were  way  overloaded.  This 
means  that  special  traffic  handling  of 
emergency-related  traffic  in  ISP  back¬ 
bones  may  be  much  less  important  than 
ensuring  priority  access  to  network-based 
servers  or  tail  circuits. 

Much  more  work  needs  to  be  accom¬ 
plished  to  understand  just  what  should 
be  done  in  this  area,  and  just  as  impor¬ 
tant,  what  is  not  worth  the  effort  to  do. 

Disclaimer:  Now  who  would  claim  that 
Harvard  is  not  worth  the  effort?  Maybe 
M.I.T.  Anyway,  the  above  observation  is 
my  own. 

Bradner  is  a  consultant  with  Harvard 
University's  University  Information 
Systems.  He  can  be  reached  at  sob@ 
sobco.com. 


J.D.  Edwards 

continued  from  page  25 

replication  models  and  studying  band¬ 
width  usage  on  their  global  network. 

Their  diligence  has  paid  off  in  that 
Exchange  2000  presents  a  new  set  of  pos¬ 
sible  applications  from  collaboration  to 
instant  messaging. 

But  J.D.  Edwards  knows  the  reality  of 
just  getting  Active  Directory  and  Ex¬ 
change  onto  a  production  network. 

“The  single  biggest  operational  chal¬ 
lenge  was  teamwork,”  says  Casey  Winkel, 
senior  infrastructure  engineer,  who  is  in 
charge  of  the  Exchange  rollout.  “Active 
Directory,  Exchange,  Internet  Informa¬ 
tion  Server  administrators  all  had  to 
work  together’’ 

Winkel  says  the  tool  set  was  another  big 
challenge,  including  new  methods  to 
administer  users  and  accounts. With  5.5  it 
was  done  on  each  server,  now  it  is  done 
centrally  in  Active  Directory 

“Practices  from  [Exchange]  5.5  don’t 
work  the  same, such  as  account  termina¬ 
tion  and  deletion,” Winkel  says.  Along  the 
way,  J.D.  Edwards  had  to  help  develop  its 
own  training  courses  because  that  mater¬ 
ial  was  not  yet  available. 

The  Exchange  environment  will  be 
paired  down  from  19  servers  to  15 
Compaq  servers, all  with  at  least  2G  bytes 
of  RAM.  The  server  reduction  was  done 
mainly  by  eliminating  separate  servers 
for  Outlook  Web  Access,  which  is  now 
core  to  Exchange  2000. 

The  three  J.D.  Edwards  Exchange  sites 
—  North  America  in  Denver,  Asia  in 
Singapore  and  Euro/Middle  East  in  the 
U.K.  —  will  be  brought  under  one  Active 
Directory'  infrastructure.  Also,  Winkel  will 
be  able  to  eliminate  the  maintenance  of 
nearly  20  connectors  —  the  software  that 


enables  connectivity  between  the  appli¬ 
cations  —  that  run  between  the  three 
sites  linking  Exchange  5.5  to  Exchange 
2000.  Once  in  native  Exchange  2000 
mode,  these  connectors  are  not  needed. 

However,  to  get  to  the  threshold  of  an 
Exchange  2000  environment  wasn’t  triv¬ 
ial  technically. 

The  challenges  started  as  soon  as 
Exchange  2000  was  connected  in  the  lab 
to  Active  Directory  which  went  live  in 
October  2000. 

Bill  Akin,  the  company’s  Active  Direc¬ 
tory  architect,  had  to  study  bandwidth 
usage  at  remote  sites  once  Exchange  and 

II  The  single  biggest  opera¬ 
tional  challenge  was  team¬ 
work.  f  1 

Casey  Winkel 

Infrastructure  engineer,  J.D.  Edwards 

Active  Directory  were  running  in  tandem. 
“We  had  to  understand  how  much  over¬ 
head  we  added  with  Active  Directory’s 
global  catalog  and  Exchange  running  at 
a  remote  site,”  Akin  says.  He  also  had  to 
deal  with  the  explosion  in  directory  size, 
which  nearly  tripled  once  Exchange 
information  was  added. 

Also,  Exchange  2000  lacked  tools  for 
mailbox  cleanup,  which  meant  Winkel 
could  not  adhere  to  the  company  policy 
of  deleting  mail  more  than  60  days  old. 
Microsoft  delivered  the  tool  in  June. 
Winkel  also  had  to  wait  for  Exchange 
2000-compatible  virus-scanning  tools. 

Another  obstacle  was  mergers.The  firm 
has  acquired  three  companies  in  the  past 
year,  the  latest  being  customer  relation¬ 
ship  management  vendor  YouCentric. 

"That’s  why  we  delayed  the  full 
Exchange  2000  rollout  and  stayed  mostly 
on  [Exchange]  5.5,”  Winkel  says.  “There 


are  advantages  to  staying  on  5.5  because 
it  has  a  lot  of  connection  tools  that  are 
not  available  in  Exchange  2000.” 

But  staying  on  5.5  brought  another  set 
of  problems  that  forced  more  lab  work. 

“There  are  replication  issues  between 
5.5  and  Active  Directory  and  between 
Active  Directory  and  5.5, ’’Winkel  says.The 
issues  can  cause  replication  storms  that 
can  cripple  your  network.  You  have  to 
keep  everything  properly  synchronized.” 

Also,  connectors  between  the  direc¬ 
tory  and  Exchange  can  lead  to  deleted 
accounts. 

“If  you  don’t  understand  the  replication 
deletion  process  you  can  cause  real 
problems,”  Andersen  says. 

But  those  issues  will  disappear  once 
Exchange  5.5  is  shut  down. 

With  those  bumps  in  the  road  behind 
them,  the  benefits  of  Exchange  2000  are 
coming  into  focus  as  J.D.  Edwards  readies 
to  move  5,500  users  to  Exchange  2000. 

Winkel  says  a  feature  called  Storage 
Groups,  which  in  essence  are  like  mini¬ 
databases,  will  make  maintenance  easier, 
allowing  a  subset  of  users  instead  of  a 
whole  server  to  be  taken  offline.  With 
maintenance  easier,  he  can  consider 
increasing  mailbox  size  from  20M  to  50M 
bytes  per  user. 

Another  benefit  will  be  better  mobile 
support  with  the  new  Outlook  Web  ac¬ 
cess  service  in  Exchange  2000,  which 
supports  more  users  per  box  than 
Version  5.5. 

“We  expect  that  Exchange  will  be  a 
dial-tone  server,  and  we  will  look  to  build 
some  add-ons,”  Andersen  says. 

He  and  Winkel  will  look  at  wireless  sup¬ 
port  through  Mobile  Information  Server 
2001  and  collaboration  services  with 
ShareFbint  Portal  Server  or  Content  Man¬ 
agement  Server.  The  two  are  also  investi¬ 
gating  instant  messaging. 

It  is  exactly  those  types  of  add-ons  that 
J.D  Edwards  hopes  will  lead  it  to  its  next 
groundbreaking  project.  ■ 


IBM  updates 
Content 
Manager  suite 

■  BY  STACY  COWLEY 

NEW  YORK  —  IBM  is  updating  its  IBM 
Content  Manager  to  offer  faster  search 
and  load  capabilities  while  adding  an 
automatic  report-distribution  feature  for 
disseminating  documents  such  as  finan¬ 
cial  statements,  invoices  and  shipping 
records. 

IBM  Content  Manager  software  is  de¬ 
signed  for  organizing  a  range  of  corporate 
information  and  documents. 

Although  it  includes  some  features  for 
publishing  information,  the  package  is 
intended  to  work  in  conjunction  with 
Web  content  management  and  publish¬ 
ing  tools  such  as  IBM’s  WebSphere  Ap¬ 
plication  Server  or  its  just-released  Lotus 
Web  Content  Management  Solution,  says 
IBM’s  Vice  President  of  Data  Management 
Jim  Kelly 

New  add-on  applications  for  accessing 
Microsoft  Exchange  and  FileNet  docu¬ 
ments  also  are  being  released. 

IBM  Content  Manager  can  be  custom¬ 
ized  for  companies  of  all  sizes,  IBM  says. 
Customers  include  the  Royal  Dutch 
Library,  card  maker  American  Greetings, 
Cable  News  Network  (a  unit  of  AOLTime 
Warner)  and  Indiana  University 

Pricing  for  the  software  starts  at  $15,000 
per  server  and  $1,200  per  concurrent 
user.  IBM  Content  Manager  is  available  for 
a  variety  of  operating  systems,  including 
IBM’s  OS/400,  z/OS  and  AIX;  Hewlett- 
Packard’s  HP-UX;  Sun’s  Solaris;  and 
Microsoft’s  Windows  NT  and  2000. 

Cowley  is  a  correspondent  with  the  IDG 
News  Service,  working  from  the  New  York 
bureau. 
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ucts  and  services  that  ensure  the  protection  of  corporate  resources. 


Risk  dictates  strength  of  corporate  security 


■  BY  ELLEN  MESSMER 

Network  professionals  face  the  perennial  job  of 
deciding  what  type  of  authentication  to  have 
corporate  employees  and  trading  partners  use 
for  access  to  corporate  resources.  Many  view  pass¬ 
words  as  the  least  secure  type  of  authentication,  but 
find  the  cost  of  using  better  authentication  methods, 
such  as  handheld  tokens  or  digital  certificates,  still 
too  high  for  general  use. 

But  in  terms  of  corporate  strategy  for  authentication 
management,  IT  professionals  and  the  vendors  they 
look  to  for  products  seem  to  agree  on  a  basic  point: 
Every  company  should  mix  and  match  authentication 
technologies  based  on  the  level  of  sensitivity  of  the 
data,  never  depending  on  passwords  alone. 

Importantly,  there’s  an  ongoing  effort  within  large 
organizations  to  centralize  authentication  manage¬ 
ment  to  quickly  issue  and  revoke  access  to  the  net¬ 
work  based  on  all  authentication  “credentials,”  or  what 
security  professionals  call  any  means  granted  to  the 
user  for  online  access. 

And  ideally,  IT  managers  want  a  way  to  centrally 
control  what  servers  or  databases  each  user  is  autho¬ 
rized  to  access.This  is  known  as  the  process  of  autho¬ 
rization  and  administration. 


II  There  are  many  products  to  choose  from, 
but  many  of  them  are  tactical  solutions  trying 
to  command  strategic  prices.  11 

Terry  McFadden 

Associate  director  of  directory  services,  Proctor  &  Gamble 


Computer  Associates,  IBM,  Secure  Computing,  RSA 
Security,  Netegrity  and  several  start-ups,  including 
WaveSet  Technologies,  Access360  and  Business  Layers, 
are  each  in  their  own  fashion  tackling  the  challenge 
associated  with  what  market  research  firm  IDC  calls 
the  three  As  —  authentication,  authorization  and 
administration. 

Controlling  access 

These  types  of  products  often  involve  controlling 
access  to  corporate  servers  by  adding  agent  software 
to  them  that  can  be  controlled  by  the  central  server. 
Some  products  let  a  manager  set  up  complex  work- 
flow  routines  that  tie  into  other  applications,  such  as 
SAP  or  PeopleSoft  databases  used  by  the  human 
resources  department,  which  maintains  essential 
employee  data. 

In  fact, at  $3  billion  in  sales  each  year,  the  market  for 
authentication,  authorization  and  administration  prod¬ 
ucts  is  considerably  larger  than  that  for  either  firewall, 
encryption  or  antivirus  product  sales  (see  graphic). 

But  with  some  of  these  software  products  for  manag¬ 
ing  the  three  As  costing  a  half-million  dollars,  many 
organizations  still  prefer  to  write  their  own  applica¬ 
tions  in-house,  especially  when  they  don’t  see  exactly 
what  they  need  on  the  market. 


“There  are  many  products  to  choose  from,  but 
many  of  them  are  tactical  solutions  trying  to  com¬ 
mand  strategic  prices,”  says  Terry  McFadden,  asso¬ 
ciate  director  of  directory  services  at  Proctor  & 
Gamble,  which  wrote  its  own  application  to  cen¬ 
trally  manage  passwords  and  digital  certificates 
for  employees.  Proctor  &  Gamble’s  home-grown 
application  uses  a  Critical  Path  directory  server  as 
the  central  repository  for  data,  including  user  pro¬ 
files  and  digital  certificates. 

As  part  of  the  effort,  the  Proctor  &  Gamble  IT 
department  had  to  work  closely  with  HR  to  link 
into  HR’s  SAP  database  to  get  user  information 
quickly,  McFadden  says. 

Proctor  &  Gamble  allocates  to  users  simple  pass¬ 
words  or  Entrust  digital  certificates,  depending  on 
the  security  requirements. The  company’s  pharma¬ 
ceutical  divisions,  in  particular,  use  digital  certifi¬ 
cates  for  signing  and  encrypting  documents, 
McFadden  says. 

Security  costs 

Digital  certificates,  which  link  a  user’s  identity  to  a 
set  of  encryption  keys  for  signing  and  encrypting,  pro¬ 
vide  far  better  security  than  simple  passwords. 

However,  digital  certificates  cost  at  least  $40  per 
user,  according  to  Gartner.  Although  IT 
managers  are  all  too  aware  that  simple 
passwords  are  a  weak  form  of  authentica¬ 
tion,  the  costs  for  stronger  authentication 
keep  passwords  dominant.  Only  4%  of 
online  transactions  use  methods  other 
than  simple  passwords,  according  to 
Gartner. 

Because  they’re  repeatedly  used  and 
easy  to  share,  reusable  “static”  passwords 
are  widely  considered  less  secure  than 
dynamic,  variable  “one-time”  passwords.“One-time” 
passwords  are  generated  via  handheld  hardware 
tokens,  such  as  those  sold  by  RSA  Security,  Secure 
Computing  and  Vasco. These  typically  cost  at  least  $25 
per  person. 

Art  Eichmann,  manager  of  corporate  information 
security  at  Universal  Studios  in  Los  Angeles,  is  a  big 
fan  of  handheld  tokens  and  plans  to  use  more  of 
them  in  place  of  simple  passwords  as  the  price  for 
tokens  drops. 

Universal  Studios  uses  the  RSA  Security  SecurlD 
token,  which  works  with  RSA’s  ACE  Server  to  recog¬ 
nize  the  variable  password.  About  4,000  remote 
employees  at  Universal  have  been  given  the  SecurlD 
token  to  identify  themselves  for  remote  access  into 
the  Universal  Studios  corporate  network. 

However,  the  cost  for  the  handheld  tokens  has  kept 
Universal  from  having  employees  use  methods  other 
than  simple  passwords  to  authenticate 
inside  the  LAN  to  the  mainframe, 

AS/400,  NT  boxes  or  their  PCs, 

Eichmann  says.  As  the  cost  drops  for 
the  tokens,  the  argument  can  more  eas¬ 
ily  be  made  to  give  them  to  all  employ¬ 
ees  for  all  authentication  needs. 

“Four  years  ago,  I  paid  $90  per  token 


Security  sales 


A  mix  of  security  products,  from  authenti¬ 
cation  software  to  firewalls,  is  what  most  users 
are  deploying  to  protect  corporate  resources. 
Here’s  what  corporations  are  buying: 

Worldwide  Internet  security  software  revenue  (In  billions) 


Security  I 
software  | 

Antivirus  I 
software  | 

Firewall  | 
Encryption 


$2.8 


for  three  years  for  SecurlD,”  Eichmann  says. “Now  I  just 
signed  up  four-year  token  use  for  under  $90. That’s  $15 
per  year  per  person.” 

Universal  Studios  also  wants  to  centralize  the  autho¬ 
rization  and  administration  process,  and  is  looking  at 
the  IBM  Tivoli  SecureWay  and  other  products,  but  will 
probably  not  decide  on  a  purchase  until  Universal’s 
merger  with  Vivendi  is  completed. 

“We’d  like  to  centralize  our  administration  as  much 
as  possible,  but  we  still  have  multiple  people  keeping 
track  of  this,  whether  it’s  for  our  AS/400,  RISC  systems 
or  NT-based  boxes  and  PCs,”  Eichmann  says. 

There  seems  to  be  a  shared  sentiment  that  despite 
the  management  headaches  of  juggling  multiple 
authentication  technologies,  it’s  critical  not  to  depend 
exclusively  on  simple  passwords. 

“Passwords  are  good  enough  for  some  things,  but 
what  about  the  mergers  and  acquisitions  depart¬ 
ment?”  notes  Barry  Keyes,  vice  president  of  the  eTrust 
Solutions  product  line  sold  by  Computer  Associates, 
which  is  ranked  the  top  vendor  in  the  three  A’s  market 
by  IDC.“Or  someone  executing  a  very  valuable  order? 
Or  from  accounting  or  pharmaceuticals  research? 

This  is  a  variation  in  the  degree  of  security  requests, 
and  a  good  system  should  be  able  to  handle  multiple 
types  of  authentication." 

Keyes  adds  that  Computer  Associates’  eTrust  Admin 
product  also  includes  a  way  to  provision  access  not  only 
to  networks  but  to  buildings,  cell  phones  and  credit 
cards. “A  provisioning  system  should  include  any  num¬ 
ber  of  things  a  new  employee  may  need,”  Keyes  says. 

Sometimes  users  are  tempted  to  think  of  simple  pass¬ 
words  as  free,  but  “that’s  not  really  true,”  notes  Willy 
Leichter,  Secure  Computing’s  product  manager  for  the 
SafeWord  product  line  used  to  centralize  management 
of  a  variety  of  authentication,  including  password,  hand¬ 
held  token,  digital  certificates, 
remote-access  authentication  via 
VPNs  or  Remote  Authentication  Dial- 
In  Service  servers. 

“You  have  to  give  users  a  pass¬ 
word  for  every  system.  That  can  be  a 
lot  of  work  for  the  help  desk,”  he 
says.  ■ 


Security 
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increase  uptime.  Speed  deployment.  And  cut  costs. 

That's  why  Dell  is  ranked  #1  in  customer  satisfaction  for  Intel®  processor-based  servers.*  To  learn  what  customers  and  analysts  are 
saying  about  Dell  Enterprise,  visit  us  at  dell.com/enterprise3. 
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■  PRODUCTS,  SERVICES  AND  STRATEGIES 

FOR  TYING  TELEWORKERS  TO  THE  ENTERPRISE 

Small  offices  turn  to  NAS 

Busting  out  of  your  PCs?  Network-attached  storage  provides  quick  and  easy  data  expansion. 


■  BY  MIKE  AVERY 

Networked-attached  storage  typically 
elicits  one  of  two  reactions,  depending  on 
whom  you  talk  to:  Either,  “Oh,  NAS  is  too 
advanced  for  a  small  company  like  ours!” 
Or  “NAS?  That’s  just  a  toy  for  home  com¬ 
puter  users!” 

While  the  first  NAS  devices  were  small 
boxes  designed  for  adding  additional  stor¬ 
age  to  a  small  or  home  network,  today  NAS 
devices  span  the  range  of  “small”  20G-  and 
40G-byte  units,  up  through  7  to  8  terabytes. 
Despite  the  growth  in  capacity  NAS  ven¬ 
dors  such  as  Dell,  FIA,  Maxtor,  Quantum 
and  Tricord  have  been  working  hard  to 
keep  the  complexity  of  the  devices  under 
control,  making  NAS  boxes  an  excellent 
choice  for  a  small  to  midsize  business.  NAS 


storage  starts  as  low  as  $500  for  a  20G-byte 
Quantum  NAS  server,  and  you  can  pay  as 
little  as  $7  per  gigabyte  when  you  purchase 
a  large  NAS  device,  such  as  the  Dell  or 
Maxtor  NAS  servers  that  can  support  from 
1  to  7  terabytes. 

What's  in  a  NASP 

NAS  servers  are  turnkey  devices  that 
house  a  cluster  of  hard  drives,  the  hardware 
needed  to  connect  to  a  network,  and  the 
hardware  and  software  to  make  it  work.  A 
number  of  vendors  claim  you  can  set  up 
their  NAS  servers  in  less  than  30  minutes. 

The  first  NAS  servers  were  based  on 
Linux,  various  versions  of  BSD  Unix,  or 
even  proprietary  software.  In  the  past  year, 
the  picture  began  to  change  as  vendors 
such  as  Dell  and  Maxtor  began  basing  their 


NAS  boxes  on  Windows  2000  and 
Microsoft’s  Server  Appliance  Kit  (SAK). 
Why  go  with  Windows?  This  camp  argues 
it’s  easier  to  implement  Win  2000  and  SAK 
than  to  fund  the  development  costs  of  their 
own  NAS  boxes.  Win  2000/ 

SAK-based  NAS  servers  use 
Microsoft’s  Internet  Infor¬ 
mation  Server  (IIS)  to  provide 
Web-based  management  of 
the  Win  2000/SAK-based 
servers.  In  light  of  the  recent 
Code  Red  worm  exploiting  IIS, 
many  system  managers  are 
reluctant  to  depend  on  a 
Microsoft-based  solution. 

Some  small-business  owners 
use  NAS  servers  to  extend 
existing  networks,  while  oth¬ 


ers,  like  Sean  Fbrcher,  use  them  as  the  core 
of  new  networks.  As  director  of  operations 
for  the  California  regional  Jiffy  Lube, 
Fbrcher  was  fed  up  with  running  an  office 
connected  by  sneaker  net,  so  he  installed 
the  FIA  POPnetserver  2000 
NAS  to  serve  shared  files. 
Installation  was  easy,  and 
Porcher  says  he’s  happy  with 
the  results.  System  managers 
in  midsize  businesses  report 
they  use  NAS  servers  to  store 
e-mail  files,  software  installa¬ 
tion  information  and  any  data 
they’d  rather  keep  off  more 
expensive  Windows  NT  or 
NetWare  server-based  storage. 
When  purchasing  a  NAS 
See  NAS,  page  34 


More  online! 

See  our  comparative  chart  of 
NAS  device  performance. 
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Empire  Blue  Gross  on  the  road  to 
recovery  after  losing  headquarters 

An  openness  to  telework,  quick  action  by  network  execs  credited. 

■  BY  JEFF  ZBAR 


■  ZoneLabs  today  announced  new 
versions  of  its  personal  firewall  prod¬ 
ucts  ZoneAlarm  3.0  and  Zone- 
Alarm  Pro  3.0.  Each  has  a  redes¬ 
igned  interface,  updated  tutorial  and 
wizards-based  installation.  Zone- 
Alarm  Pro  provides  ad  blocking  and 
cookie  control  features,  and  added 
security  for  networks.  New  features 
to  Pro  version  include  ad  blocking, 
cookie  control,  enhanced  network 
security,  and  protection  against  Java¬ 
Script  and  ActiveX  controls.  Pricing 
for  ZoneAlarm  is  free;  ZoneAlarm 
Pro  pricing  has  not  yet  been  set. 
www.zonelabs.com 

■  A  Cahners  In-Stat  report  predicts 
the  home  networking  market  will 
grow  to  from  $1.4  billion  in  2001  to 
$9.2  billion  worldwide  by  2006.  "The 
Digital  Domicile:  The  Exploding 
Market  for  Home  Networking  and 
Technology  Services”  credits  the 
popularity  of  802.11b  wireless  net¬ 
works  and  low-end  network  address 
translation  routers  used  in  broad¬ 
band  sharing  for  spurring  the  growth 
thus  far.  www.instat.com 


By  noon  Tuesday,  Sept.  11,  Empire  Blue 
Cross  Blue  Shield  had  launched  a  tele¬ 
work  program. 

With  its  10-floor  headquarters  gone 
and  1,900  workers  left  without  offices, 
executives  with  the  New  York  health 
insurer  quickly  forged  a  plan  to  get  one- 
fifth  of  its  World  Trade  Center  employees 
back  to  work. 

It  seemed  to  Vice  President  and  Chief 
Infrastructure  Officer  Michael  Galvin  that 
one  minute  he  was  sprinting  along  West 
Street  and  away  from  ground  zero,  and 
the  next  he  was  approving  a  purchase 
order  for  500  computers,  which  included 
150  servers  and  150  laptops  for  the 
remote  workforce  he  anticipated  sup¬ 
porting  postdisaster. 

On  Wednesday,  Galvin  worked  with  the 
company’s  network  administrators  in 
Albany,  N.Y,  to  expand  its  remote  access 
support  from  200  to  1,000  users.  On 
Thursday,  Galvin  put  in  motion  a  massive 
VPN  deployment  with  the  help  of  Cisco, 
which  rush-delivered  routers  and  switches 
and  lent  installation  assistance. 


Teleworking  by  noon 

Empire  Blue  Cross  Blue  Shield  execu¬ 
tives  cite  five  keys  to  jump-starting 

a  telework  program: 

•  Bring  in  IT.  One  of  the  first  calls  after 
the  attack  was  to  IT.  Some  500  computers 
were  ordered,  and  IT  was  instructed  to 
increase  access  to  the  remote  network, 
which  included  deploying  VPNs  capable 
of  handling  1000  remote  connections. 

•  Call  on  strategic  partners.  From 
Cisco  to  IBM  to  its  advertising  agency, 
Empire  found  allies  with  space  to  spare. 

•  Do  a  head  count.  Know  your  workers, 
their  teams  and  business  units,  and 
where  they  should  be  placed  so  that  they 
can  work  remotely. 

•  Survey  workers  and  managers.  While 
the  decision  to  telework  is  up  to  individual 
teams,  workers  and  managers  have  to 
be  asked  who  wants  to  telework  —  and 
whose  job  is  suitable  for  it. 

•  Realize  the  stress  of  the  commute. 

To  reduce  stress  and  retain  top  workers 
after  a  move  to  more  remote  work 
locations,  the  company  offered  telework. 


“The  whole  infrastructure  was  up  by 
Friday”  Galvin  says.  That  was  joined  by  a 
toll-free  employee  hot  line  and  a  Web  site 
to  get  news  to  disparate  workers. 

More  than  8,000  miles  away,  Kenny 
Klepper,  Empire’s  senior  vice  president  for 
systems  technology  and  infrastructure, 
abruptly  ended  a  review  of  one  of  IBM’s 
computer  facilities  in  Bangalor,  India, 
when  he  received  news  of  the  attack.  He 
rode  on  an  IBM  private  jet  to  Frankfurt, Ger¬ 
many,  and  then  flew  to  Montreal,  where  he 
was  met  by  a  company  van  that  drove  him 
back  to  Albany  By  Friday,  Klepper  was  set¬ 
ting  up  many  employees  in  alternative 
workspaces.  Two  hundred  began  working 
from  home,  a  number  expected  to  climb 
to  400  by  mid-October.  All  this  comes  from 
a  company  that  never  before  featured  a 
formal  telework  program. 

“Our  two  priorities  were  the  relocation 
of  employees  and  reestablishing  business 
operations,”  Klepper  says.  Getting  employ¬ 
ees  placed  has  involved  a  patchwork  of 
solutions  designed  around  meeting  com¬ 
pany  production  needs  and  employees’ 
physical  and  psychological  needs. 

See  Aftermath,  page  34 
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Coming  up  the  path,  home  servers 


What’s  a  home  server?  Don’t  know? 
You’re  not  alone.  It’s  an  overarch¬ 
ing,  ambiguous  term  that’s  been 
floating  around  the  home  network  indus¬ 
try  for  years.  The  idea  is  that  as  storage 
demands  grow, your  network  will  require  a 
centralized  place  for  files  accessible  by 
multiple  users  —  everything  from  e-mail 
to  shared  files  and  documents,  to  family 
photos,  MP3  files  and  streaming  media. 

Recently,  Mike  Wolf,  an  analyst  at 
Cahners  in-Stat,took  up  the  home  server 
cause  by  suggesting  in  a  report  that 


“dropping  storage  prices  and  increasing 
demand  to  put  network  connectivity 
into  both  PC  and  non-PC  devices”  could 
signal  the  viability  of  a  home  server  mar¬ 
ket  in  coming  years. 

Wolf,  the  author  of  the  just-released 
“Speed!  Understanding  and  Installing 
Home  Networks,” says, “The  idea  of  a  home 
digital  filing  cabinet  is  starting  to  make 
more  and  more  sense”  for  hobbyists  and 
for  home  workers.  There  are  “pockets  of 
storage”  around  the  house  today,  such  as 
set-top  boxes,  digital  broadcast  satellite 
receivers  and  MP3  digital  audio  servers. 
An  entertainment-centric  home  server 
could  combine  all  these  functions  in  one 
box.Two  companies, Ucentric  and  DoBox, 
have  popped  up  and  are  working  on 
home  server  gateway  products. 

But  what  about  business  applications? 
The  more  mundane  office  spreadsheets 


and  household  documents  stored  on  the 
same  server  as  kids’  homework,  maybe? 

“That’s  going  to  be  more  of  a  grass-roots 
movement;  more  technical  people  setting 
up  Linux  servers  in  their  basements,” Wolf 
says.“How  much  value  can  a  home  server 
add?  As  applications  arise,  we  might  see 
more  centralized  messaging  in  the  house, 
but  it’s  going  to  take  time.” 

Assuming  it  has  sufficient  hard-disk 
space,  you  can  enlist  an  old  computer  as 
a  home  network  file  server.  Another 
option  is  to  buy  a  network-attached  stor¬ 
age  server  (see  “Small  offices  turn  to 
NAS,”  page  33),  although  Wolf  says  prices 
need  to  come  down  before  that  trend 
takes  off. 

“Low-end  NAS  servers  are  $500.  We  need 
to  see  a  $200  product.  Maybe  from 
Linksys,”  he  says. 

If  you’re  intrigued  by  the  idea  of  using 


an  old  computer  as  a  centralized  storage 
device,  you  might  consider  upgrading 
your  computers  to  Windows  XP  due  out 
this  month.  Wolf,  who’s  tested  a  beta  ver¬ 
sion,  says  new  features,  wizards  and 
improved  documentation  make  home 
networking  much  easier. Tutorials  include 
pop-up  graphics  that  show  you  how  to  put 
the  network  together  and  what  it  should 
look  like,  and  define  terms  such  as 
“bridge”  and  “802. 1 1  b.” 

My  “gold”  copy  Windows  XP  is  in  the 
mail  from  Microsoft.  After  I  give  it  a  spin 
on  my  own  home  network,  I’ll  report  here 
whether  1  think  it’s  worth  the  upgrade  for 
yours.’  And  1  might  even  try  building  a 
home  server. 

Kistner  is  the  managing  editor  of  the 
Net.  Worker  section  of  Network  World.  She 
can  be  reached  at  tkistner@nww.com. 
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server,  consider  compatibility, 
security,  expandability,  manage¬ 
ability  and  performance. 
Compatibility  determines  what 
sort  of  computers  you  can  use 
with  the  NAS  device.  Most  use 
IBM  PC  compatible  computers 
and/or  Macintosh  computers.  If 
you  have  a  network  in  place, 
ensure  the  NAS  device  you’re 
considering  will  work  with  your 
network  operating  system.  Most 
NAS  servers  will  support  Win 
NT/2000,  NetWare  in  bindery 
mode  and  Unix’s  Network  File 
System.  However,  many  still  don’t 
support  Microsoft’s  Active  Dir¬ 
ectory  or  Novell’s  NetWare 
Directory  Services. 

Security  and  data  protection 

Most  NAS  servers  include  built- 
in  security  systems  to  limit  ac¬ 
cess  to  files  to  people  who  log  on 
and  are  authorized.  Most  will 
work  with  the  security  systems  of 
the  existing  network  operating 
systems  they’re  compatible  with, 
so  the  operating  system  decides 
who  may  access  which  files  and 
the  NAS  server  follows  its  lead. 
This  means  the  additional  main¬ 
tenance  for  supporting  a  NAS 
device  is  minimal. 

Data  needs  to  be  protected 
against  loss.This  can  occur  as  the 
result  of  hardware  failure,  such  as 
a  drive  failing.  Every  NAS  vendor 
lets  you  configure  the  drives  in  its 
server  as  a  RAID,  with  all  except 
the  very'  least-expensive  offering 
RAID  Level  1  or  higher,  which  pre¬ 
vents  data  loss  in  the  case  of  a  sin¬ 
gle  drive  failure.  For  more  details 
on  RAID,  check  out  Network 
World  Fusion’s  research  section 
on  storage-area  networks:  www. 


nwfusion.com,  DocFinder:  6327. 

While  RAID  protects  your  net¬ 
work  against  hardware-induced 
data  loss,  it  can’t  protect  it  against 
catastrophes  or  data  erasure  — 
whether  malicious  or  accidental 
—  so  you  also  need  a  data  back¬ 
up  solution.  All  the  NAS  vendors 
bundle  their  own  back-up  soft¬ 
ware,  provide  client  software  to 
work  with  enterprise  back-up  sys¬ 
tems  or  have  an  interface  that  lets 
you  connect  a  tape  drive  directly 
to  the  NAS  device. 

Surprisingly, many  NAS  users  still 
don’t  understand  the  importance 
of  regular  data  backup.  But  con¬ 
sider  this:  A  University  of  Wis¬ 
consin  report  showed  that  of  the 
companies  that  lost  their  data  in  a 
disaster, 43%  never  reopened  their 
doors,  and  29%  were  out  of  busi¬ 
ness  within  two  years. 

As  a  second  line  of  defense, 
a  number  of  companies  have 
added  snapshot  technology  to 
defend  against  lost  data.  The 
snapshot  mechanism  keeps  de¬ 
leted  information  around  until 
the  space  it  uses  on  your  hard 
drive  needs  to  be  used  for  other 
purposes.  This  doesn’t  protect 
you  against  equipment  theft  or 
damage,  but  it  does  cover  most 
typical  data  loss.  At  this  point, 
Microsoft’s  SAK  and  the  NAS 
servers  that  use  it  have  an 
advantage  in  this  area  while  the 
other  vendors  are  scrambling  to 
catch  up. 

Scalability  and  speed 

Expandability  is  a  vital  issue  — 
some  studies  suggest  data-storage 
needs  double  every  four  months 
in  some  companies. While  budget 
systems  such  as  the  inexpensive 
Quantum  SnapServers  are  stand¬ 
alone  boxes  that  don’t  offer 
expansion,  larger  systems  make 


scaling  easy  The  Maxtor  orTricord 
products  let  users  add  additional 
boxes  and  cable  them  together. 
Tricord  has  users  add  additional 
servers,  connected  through  a  pri¬ 
vate  network.  The  servers  have  a 
self-adjusting  RAID-like  construct 
that  moves  data  between  servers 
when  servers  are  added  to  the 
network.  Because  each  server 
adds  a  processor  and  network 
connection  as  the  system  is  ex¬ 
panded,  system  performance 
improves. 

Performance  is,  of  course,  the 
Holy  Grail  to  network  managers. 
Any  device  we  looked  at  for 


Surprisingly,  many 
NAS  users  still  don’t 
understand  the 
importance  of  regu¬ 
lar  data  backup. 

our  features  comparison  chart 
should  perform  well  for  a  small 
office  —  say  10  users,  or  even 
more  if  they  aren’t  putting  heavy 
demands  on  the  NAS  server. 


However,  as  the  size  of  the  net¬ 
work  grows,  users  will  need  to 
make  sure  the  NAS  box  is  up  to 
the  task.  All  the  vendors  talk 
about  performance,  and  all  will 
compare  it  —  and  their  prices  — 
to  the  cost  of  an  NT  server. 

As  office  size  goes  up, so  to  will 
the  need  for  storage  space  and 
performance  demands.  The  best 
bet  here  is  to  get  a  reasonable 
evaluation  period  to  make  sure 
the  performance  will  actually 
meet  the  office’s  needs.  This  is 
where  having  a  good  relation¬ 
ship  with  a  reseller  can  be 
invaluable.® 
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With  the  company’s  disaster- 
recovery  plan  in  hand,  Klepper 
had  a  complete  inventory  of 
each  property’s  employees,  busi¬ 
ness  units  and  adjacencies. 
When  the  company  moved  into 
the  World  Trade  Center  in  1999, 
space  planners  considered  how 
communication  and  collabora¬ 
tion  would  be  maintained 
among  complementary  work¬ 
groups  across  450,000  square 
feet  on  10  floors. 

Today,  Empire  wrestles  with  the 
same  questions  —  only  in  a  half- 
dozen  locations  scattered  across 
New  York  state.  The  company’s 
Albany  and  other  outlying  offices 
took  400  workers.  Hundreds  more 
went  to  Empire’s  Melville, N.Y, cus¬ 
tomer  service  center;  IBM,  which 
houses  a  facility  next  door  in 
Melville;  and  advertising  agency 
Digitas  in  midtown  Manhattan. 
Some  facilities  maxed  out  quickly, 
Galvin  admits.  “We’ve  got  some 
conference  centers  set  up  for 
senior  VPs,”  he  says. 


But  for  employees  who  now 
work  in  Albany,  Melville  or 
Queens,  the  commute  from 
their  New  York  City-area  homes 
is  likely  to  cause  undue  stress 
after  the  trauma  of  the  attacks, 
Klepper  says.  (The  company 
lost  nine  employees  in  the  dis¬ 
aster.)  In  such  cases,  telework 
may  be  preferable. 

If  the  commute  is  too  long, 
“you’re  going  to  turn  over  critical 
staff  or  make  them  miserable,” 
Klepper  says.“In  1999,  just  moving 
people  from  midtown  to  the 
World  Trade  Center  was  an  issue.” 

While  21%  of  Empire’s  dis¬ 
placed  employees  are  telework¬ 
ing  today  executives  were  cau¬ 
tious  not  to  throw  remote  officing 
at  workers  who  weren’t  prepared. 
During  counseling  in  the  days 
that  followed,  Empire  told  em¬ 
ployees  who  felt  they  could  tele¬ 
work  to  contact  divisional  man¬ 
agers.  Managers  then  determined 
who  they  felt  was  qualified  and 
who  they  felt  comfortable  man¬ 
aging  remotely.  The  company  is 
also  holding  reliability  meetings 
several  times  each  week  to  en¬ 


sure  the  program  is  working. 

Empire,  whose  only  previous  ex¬ 
perience  with  telework  was  by 
individual  unit  manager’s  dis¬ 
cretion,  needs  to  find  answers  to 
some  tough  questions.  Can  teams 
collaborate  remotely?  Do  phone 
calls  suffice,  and  when  is  face¬ 
time  necessary?  Can  people  han¬ 
dle  the  isolation  of  home  officing 
so  soon  after  the  tragedy? 

As  they  emerge  from  the  crisis, 
Empire  executives  have  found 
habits,  experiences  and  strengths 
that  can  carry  the  company 
through  its  next  few  months  — 
and  into  the  future. 

“As  we  go  through  this  experi¬ 
ence,  we’re  going  to  learn  a  lot 
about  work  from  home,  and  a  lot 
of  the  opinions  and  myths  [about 
telework]  are  going  to  fall  to  the 
wayside,”  Klepper  says.  ■ 
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Getting  defensive  about  wireless  spectrum 

In  wake  of  attacks,  Department  of  Defense  unlikely  to  free  up  prime  spectrum  any  time  soon. 


■  BY  CARA  GARRETSON 

Hoping  to  facilitate  the  launch  of 
advanced  wireless  services  in  the  next 
few  years,  the  Federal  Communications 
Commission  has  been  eyeing  several 
spectrum  bands  belonging  to  different 
organizations  as  candidates  for  realloca¬ 
tion.  But  given  the  heightened  military 
activity  after  last  month’s  terrorist 
attacks,  it’s  unlikely  the  Department  of 
Defense  will  vacate  the  spectrum  used 
to  support  its  network  any  time  soon. 

An  FCC  insider  says  that  since  the  Sept.  1 1 
attacks  there  has  been  no  activity  around 
the  discussions  with  the  Defense 
Department  to  move  its  wireless  communi¬ 
cations  infrastructure  to  a  different  spec¬ 
trum  band.  It  appears  the  FCC  and  the  U.S. 
Department  of  Commerce’s  National 
Telecommunications  and  Information 
Administration  (NTIA),  which  is  also 


■  BellSouth  last  week  filed  an  appli¬ 
cation  with  the  Federal  Communica¬ 
tions  Commission  seeking  permission 
to  offer  long-distance  voice  and  data 
services  in  Georgia  and  Louisiana.  The 
FCC  will  rule  on  the  application  within 
90  days.  BellSouth  does  not  yet  have 
long-distance  approval  in  any  of  the 
nine  states  where  it  offers  local  tele¬ 
phony  and  data  services,  www.bell 
south.com 

■  Loudcloud,  which  helps  companies 
manage  their  Web  sites,  last  week 
announced  expanded  support  for  Mic¬ 
rosoft  applications.  Loudcloud  can 
now  quickly  provision,  scale  and  man¬ 
age  Application  Center  2000,  BizTalk 
Server  2000,  Commerce  Server  2000, 
Exchange  2000  Server  and  SQL 
Server  2000  as  well  as  Windows  2000 
and  its  Active  Directory  and  Micro¬ 
soft  Message  Queuing  technologies. 
www.loudcloud.com 


involved  in  licensing  spectrum,  will  have  to 
look  elsewhere  to  help  free  up  airwaves 
and  offer  some  relief  to  the  national  spec¬ 
trum  shortage  (see  sidebar,  page  39). 

Before  Sept.  11,  pressure  had  been  build¬ 
ing  on  the  Defense  Department  to  relo¬ 
cate  its  communications 
services  sooner,  rather  than 
later  —  a  move  the  de¬ 
partment  had  always  said 
would  be  difficult.  In  the 
wake  of  the  terrorist 
attacks,  the  Defense  Depart¬ 
ment  has  reaffirmed  its  ear¬ 
lier  stance. 

“September  1 1  did  not 
change  our  assessment  that 
the  1710  tol850  [MHz]  band  [to  which  the 
Defense  Department  has  license]  is  cur¬ 
rently  vital  to  our  nation’s  security”  Badri 
Younes,an  official  with  the  spectrum  man¬ 
agement  office  of  the  deputy  assistant  sec¬ 
retary  of  defense,  said  in  a  statement. 
“Neither  did  it  change  our  assessment  that 


■  BY  JENNIFER  MEARS  AND  DENISE 
PAPPALARDO 

SAN  FRANCISCO  —  Digital  Island,  a 
wholly  owned  subsidiary  of  Cable  & 
Wireless  since  being  acquired  this  sum¬ 
mer,  last  week  introduced  services 
designed  to  go  beyond  basic  Web  hosting 
and  content  delivery  by  exploiting  the 
new  concept  of  Web  services. 

Digital  Island,  taking  advantage  of  its 
new  parent  company’s  global  IP  back¬ 
bone  and  network  of  data  centers, 
announced  its  2Way  Web  Services,  which 
are  aimed  at  facilitating  two-way  applica¬ 
tion  processing  and  advanced  content 
delivery  and  management  across  the 
Internet. 

Consistent  with  the  broader  concept  of 
Web  services,  Digital  Island’s  new  offer¬ 
ings  let  customers  create  and  use  applica¬ 
tion  services  by  stitching  together  pieces 
of  existing  services  on  the  fly  The  Web  ser¬ 
vices  concept  is  being  promoted  by  the 
likes  of  IBM  and  Microsoft,  and  increas¬ 
ingly,  by  new  and  established  service 
providers. 

“[Digitaj  Island  has]  taken  a  whole 


one  day  we  may  be  able  to  accommodate 
industry  by  vacating  it.” 

While  the  wireless  industry  would  like  get 
its  hands  on  the  1755-MHz  tol860-MHz 
band  and  launch  3G  services  within  the 
next  few  years,  the  Defense  Department 
stressed  that  relocating  so 
quickly  is  not  an  option. 
“Our  departure  from  that 
band  cannot  be  completed 
until  approximately  2017, 
when  upgraded  or  new 
ground  and  satellite  com¬ 
munication  systems  would 
support  such  a  move,” 
Younes  said. 

That  time  frame  won’t 
mesh  with  the  schedules  of  wireless  car¬ 
riers,  which  hope  to  launch  3G  services 
within  a  year  or  two.  Among  other  new 
offerings,  3G  services  will  bring  multime¬ 
dia  applications  to  mobile  phones. 

The  wireless  industry  and  regulators 
have  been  particularly  interested  in  the 


string  of  elements  that  would  be  required 
to  execute  a  transaction  or  push  informa¬ 
tion  out  to  provide  interactive  customiza¬ 
tion,”  says  Dan  Tardelli.a  research  analyst 
with  Aberdeen  Group.  “They’ve  taken 
every  minute  service  as  small  as  it  might 
be  and  made  it  a  service  itself  that  can  be 
integrated  depending  on  whether  a  cus¬ 
tomer  needs  it  or  not,  and  when  they 
need  it.” 

For  example,  an  online  content  provider 
that  wants  to  charge  users  only  in  certain 
instances  can  use  a  pay-per-view  module, 
requiring  end  users  pay  only  for  designat¬ 
ed  downloads.  A  business  running  a  glob¬ 
al  Web  site  can  use  modules  geared  for 
separate  locations  around  the  world  to 
ensure  the  site  is  updated  with  advertise¬ 
ments,  products  and  other  content  appro¬ 
priate  for  each  location. 

In  addition  to  giving  customers  more  flex¬ 
ibility,  the  offering  lets  them  to  pay  only  for 
those  application  services  they  use. 

Tardelli  says  other  hosting  providers 
have  developed  modularized  packages, 
but  what  Digital  Island  offers  is  different. 

“Everyone  has  gone  to  preconfigured 
modules  of  service,  basically  the  Lego 


1755-MHz  to  1850-MHz  band  of  spec¬ 
trum.  This  is  one  of  the  blocks  that 
the  International  Telecommunications 
Union  last  year  designated  for  global  3G 
use.  Proponents  of  3G  say  if  all  countries 
reserve  the  same  spectrum  band  for  the 
service,  chances  are  greater  for  “harmo¬ 
nization”  of  services. 

The  Defense  Department  had  long 
maintained  that  moving  to  a  different 
spectrum  band  was  out  of  the  question, 
citing  the  potential  for  national  security 
risks  and  compromised  safety  of  military 
personnel  —  and  the  cost  —  involved  in 
moving  to  new  airwaves.  But  during  the 
summer,  the  agency  relaxed  its  stance  and 
entered  into  negotiations  with  the  FCC 
and  the  NTIA;  it  is  believed  the  depart¬ 
ment  was  motivated  by  the  possibility  that 
at  least  some  of  the  fees  generated  from 
reauctioning  its  spectrum  would  be  fun- 
neled  into  the  department. 

The  Defense  Department  “really  does 
See  Wireless,  page  39 


mentality;  I’m  going  to  stack  Legos  and 
maybe  it’s  not  a  custom  fit,  but  1  can  offer 
it  to  anybody  on  the  fly  It’s  premade  and 
scalable,”  he  says.  “Digital  Island  takes  it  a 
step  further  by  breaking  down  the  Legos 
into  much  smaller  pieces.  Digital  Island’s 
preconfigured  modules  are  much  smaller 
and  can  be  applied  on  the  fly  to  unique  or 
custom  situations.” 

Digital  Island  does  not  yet  support 
emerging  Web  services  standards  such 
Simple  Object  Access  Protocol,  which 
would  let  the  service  provider  automati¬ 
cally  integrate  its  Web  services  with  exter¬ 
nal  applications.  But  the  company  says  it 
is  prepping  its  network  to  support  such 
emerging  standards. 

Tim  Wilson,  chief  marketing  officer,  says 
the  services  are  priced  based  on  design 
work,  number  of  transactions  sent, 
amount  of  content  sent  and  bandwidth 
used,  and  a  fixed  component  based  on 
computing  assets  (people,  security  and 
functions).  Wilson  says  a  typical  client 
would  spend  between  $100,000  and 
$300,000  per  year,  although  costs  can 
reach  into  the  millions. 

Digital  Island:  www.digitalisland.com 
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LAUNDRY  INSTRUCTIONS 

1 .  Install  filter  with  your  firewall, 
cache  engine,  or  proxy  server. 

2.  Forget  about  it. 
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Websense  is  the  simplest,  most  transparent  Web  filtering  tool  around. 
And  the  most  recommended.  Ask  your  systems  integrator.  Ask  your 
consultant.  Heck,  call  our  partners  direct.  You'll  find  out  why  Websense 
is  installed  in  companies  as  small  as  50  people,  yet  covers  more 
than  250  Fortune  500  firms.  Comprehensive  reporting.  Automatic 
nightly  updates.  Scalability  up  to  100,000  users.  And  filtering  flexibility 
to  satisfy  your  CEO's  every  quirk.  Best  of  all,  it's  self-cleaning.  So  you  won't 
have  to  get  your  hands  dirty.Try  it  at  www.websense.com. 
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continued  from  page  37 

need  to  upgrade  their  systems, so 
the  possibility  of  auction  revenue 
was  enticing,” says  Rudy  Baca,  an 
analyst  with  The  Precursor 
Group. 

But  since  the  attacks,  the  in¬ 
dustry  and  the  government  will 
be  less  likely  to  press  the  timing 
issue  with  the  department,  Baca 
says. 

“No  ones  going  to  challenge 
the  [Defense  Department], They 
say  they  can’t  give  up  spectrum 
because  of  threats  to  national 
security,  and  soldiers  could  get 
killed.  Who’s  going  to  argue 
against  that  now?”  he  says. 
“People  haven’t  yet  realized  that 
those  attacks  drastically  altered 
the  spectrum  management  and 
communication  services  in  this 
country,  and  will  for  a  significant 
period  of  time.” 

Garretson  is  a  correspondent 
with  the  IDG  News  Service's 
Washington,  D.  C.  bureau. 


Mobile  moves  into  fixed  wireless  space 


FCC  opens  spectrum  band  to  3G  and  more. 


To  free  up  more  airwaves  for  wireless 
communications,  the  Federal 
Communications  Commission  has 
announced  it  will  let  license  holders  of  the 
2500-MHz  to  2690-MHz  spectrum  frequen¬ 
cies  offer  mobile  services  in  that  band. 

Currently,  those  frequencies  are  used  by 
instructional  television  fixed  services 
(ITFS)  and  multichannel  multipoint  distrib¬ 
ution  services  (MMDS),  also  known  as 
fixed  broadband  or  fixed  wireless. 

The  FCC  considered  ITFS  and  MMDS 
potential  targets  for  reallocation.  But  the 
agency  said  last  week  that  it  will  not  move 
those  services  from  that  band;  it  will  let 
mobile  communications,  including  3G  wire¬ 
less  services,  traverse  those  airwaves. 

But  sources  say  neither  ITFS  nor  MMDS 
traffic  can  co-exist  with  mobile  communi¬ 
cations  traffic  for  technological  reasons, 


making  the  expanded  use  provision  in 
truth  an  evolutionary  option  for  license 
holders.  The  FCC  decided  against  officially 
moving  the  incumbents  from  this  band 
because  “they  came  back  to  us  with  a  flur¬ 
ry  of  comments,  saying  they  are  using  the 
band  for  broadband  services 
that  were  just  as  valuable,  if 
not  more  valuable,  than  mobile 
services,”  an  FCC  official  says. 

Fixed  broadband  services  are 
popular  in  rural  areas,  where 
other  high-speed  options  such 
as  DSL  or  cable  modems 
aren't  available.  The  technol¬ 
ogy  transmits  data  via  anten¬ 
nas  on  top  of  buildings  within  a 
short  distance  of  each  other. 

According  to  an  FCC  state¬ 
ment,  the  agency  decided  to 


More  online! 

Get  more  news  and  opinions  or 
the  wireless  spectrum  debate. 
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expand  the  options  for  the  band’s  use 
because  it  wants  to  get  away  from  speci¬ 
fying  what  technology  should  be  used  in 
which  spectrum,  preferring  to  let  market 
forces  dictate  which  services  are  offered. 
But  for  two  of  the  largest  MMDS  pro¬ 
viders,  WorldCom  and  Sprint, 
launching  mobile  services  in 
that  space  would  mean  termi¬ 
nating  existing  services. 
"Sprint  agrees  with  the  FCC’s 
decision  to  protect  incum¬ 
bents  from  interference  while 
allowing  market  forces  to 
determine  the  feasibility  of 
using  this  spectrum  for  addi¬ 
tional  services,"  Sprint  said  in 
a  statement.  WorldCom  offi¬ 
cials  declined  to  comment. 

—  Cara  Garretson 
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EYE  ON  THE 
CARRIERS 

Johna  Till 
Johnson 


Unless  you’ve  been  pulling  a  Rip 
Van  Winkle  in  the  past  six  months, 
it’s  hard  to  miss  the  fact  that  the 
service  provider  landscape  has  been  in 
a  virtual,  market  free-fall. The  industry  is 
effectively  imploding,  with  many  erst¬ 
while  leaders  involved  in  bankruptcies 
(PSINet,  Rhythms  NetConnections  and 
Exodus  Communications);  mergers  and 
acquisitions  (SBC  Communications/Pro¬ 
digy,  the  rumored  BellSouth/AT&T 
deal);  and  service  and  equipment  slow¬ 
downs  Qust  about  everybody). 

Many  formerly  high-flying  providers 
have  lost  so  much  value  that  their  stocks 
are  listing  at  fire-sale  prices.  And  yester¬ 
day’s  telephone  company  visionaries 
have  put  for-sale  signs  on  their  man¬ 
sions,  yachts,  private  islands  and  rare 
California  wine  collections. 

In  my  last  column  (www.nwfusion  .com, 


The  challenges  facing  the  service  provider  market 


Part  one  of  a 
two-part  series 


DocFinder:  6330),  I  wrote  about  why  this 
is  happening.  But  from  an  enterprise 
telephone  company  manager’s  perspec¬ 
tive,  the  question  isn’t  so  much  why  as  it 
is  what  do  I  do  about  it?  Unfortunately, 
these  changes  make  for 
more  than  just  interesting 
reading.  Mergers  and 
bankruptcies  can  lead  to 
outages  and  discontinued 
service,  not  to  mention 
unmet  service-level  agree¬ 
ments  (SLA),  slowed- 
down  response  times  and, 
ultimately,  unhappy  users. 

To  put  it  simply:  With  the  service  provider 
market  in  convulsions,  companies  must 
take  extra  care  to  protect  themselves  and 
their  users.  The  following  are  some  tried- 
and-true  strategies  for  ensuring  service 
continuity  through  chaotic  times: 

•  Run  a  credit  check  on  any  provider 
before  signing  the  contract,  and  audit  the 
provider’s  cash  flow  on  a  regular  basis 
(minimally,  quarterly)  thereafter.  Do  this 
no  matter  what,  even  if  the  company  is  a 
“name  brand” player  (see  next). 

•  Don’t  expect  that  dealing  with  name 


CARRIERS 
IN  CRISIS 


brand  carriers  will  protect  you.  Sure,  in¬ 
cumbent  local  exchange  carriers,  old- 
world  interexchange  carriers  and  post, 
telegraph  and  telephone  adminis¬ 
trations  have  bigger  cash  piles,  but 
they’re  not  immune  to 
market  vagaries  and 
plain-old  bad  decisions. 

One  established  pro¬ 
vider  recently  said  (point¬ 
ing  to  the  single  page  of 
paper  that  remained  on 
his  conference  room  flip 
chart): “See  that?  My  bud¬ 
get  is  so  low  that  I  haven’t 
been  able  to  afford  to  replace  that  for  the 
past  three  months!” 

•  Don’t  put  all  of  your  eggs  in  one  bas¬ 
ket.  I  have  discussed  the  value  of  a  mat¬ 
rix  request  for  proposal  that  helped  win¬ 
now  down  the  service  providers  to  a  sel¬ 
ect  few. 

The  operative  word  here  is  “few”  (as  in 
“more  than  one”). 

These  days,  it’s  simply  not  safe  to 
entrust  all  your  services  to  a  single 
provider,  even  if  the  rates  are  enticingly 
low.  If  that  provider  goes  out  of  business, 


you’ll  be  paying  nothing  —  but  getting 
no  services,  either. 

•  Use  the  market  crunch  to  renegotiate 
SLAs,  rather  than  price. Telco  prices  have 
gotten  so  low  that  chances  are  your  rates 
are  reasonable.  Focus  on  maintaining  ser¬ 
vice  quality  and  reducing  management 
overhead.  For  example,  if  you  haven’t 
already  consolidated  your  minimum  an¬ 
nual  revenue  commitment  into  a  single 
amount  (or  eliminated  it  entirely),  now  is 
the  time. 

•  Pay  your  bills  on  time.This  may  seem 
counterintuitive,  but  consider  that  if 
your  provider  is  delivering  quality  ser¬ 
vices  at  a  reasonable  price,  you  should 
help  ensure  the  provider  remains  in  bus¬ 
iness.  Paying  your  bills  promptly  will  en¬ 
sure  a  healthy  cash  flow  for  your 
provider. 

Johnson  is  senior  vice  president  and 
CTO  for  Greenwich  Technology  Partners, 
a  leading  network  consulting  and  engi¬ 
neering  firm.  She  can  be  reached  at 
johna@greenwichtech.com.  The  second 
part  of  “Carriers  in  crisis  ”  will  run  in  the 
Oct.  22  edition  of  Network  World. 


Poor  Bobby.  He  means  well.  He  even  tries  to  anticipate  your  needs  but  —  wouldn’t  you  really  rather  order  lor  yourself?  With 
Hypercom  Network  Systems,  you  can.  As  developers,  it  is  our  job  to  cater  to  you,  our  financial  and  retail  customers  who  want  to 
upgrade  rather  than  replace  their  network.  And,  unlike  our  ;’we  know  what's  best  for  you"  competitors, 
we  take  the  consultative  approach  and  assist  our  customers  through  network  planning  and  blueprinting  with 

specially  prepared  solutions  that  actually  work.  Customized.  Individualized.  Real  Network  Solutions. 


(Sorry,  Bobby.) 


We’ve  also  launched  a  mouth-watering,  new  interactive  Web  site  to  make  the  process  even  easier  for  you. 

By  visiting  WWW.CUStomnetS.com  and  entering  basic  information  about  your  current  network  needs,  you’ll  get  a  fully-customized  blueprint 
of  your  new  network  in  less  than  5  minutes.  Or,  you  can  pick  from  our  complete  menu  of  industry-specific  working  combinations. 
Smart,  huh?  And  such  a  far  cry  from  "I'll  be  deciding  what  you're  having."  From  your  entree  to  your 
network,  it’s  not  enough  for  it  to  be  merely  palatable,  it  has  to  fit  your  tastes  perfectly. 


So,  until  Bobby  and  others  start  listening  to  your  needs,  we  ll  be  more  than  happy  to  take  your  order. 

To  find  out  about  real  network  solutions,  visit 
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The  Fluke  OneTouch™  Network  Assistant  gives  your 
troubleshooting  crews  super  human  vision.  Plug  it  into  any 
port,  press  the  AutoTest  icon  and  the  OneTouch  eyeballs  the 
entire  network.  Bingo:  An  instant  read  on  the  connectivity 
status  of  every  desktop  station,  router,  server  and  switch. 
Another  touch  zeros  in  on  the  exact  switch  port,  printer  or  PC 
that's  causing  the  problem.  It  checks  everything  from  traffic 
snarls  to  NICs,  hubs  and  cables.  Problem  solved.  With  OneTouch. 
Click  to  www.flukenetworks.com/ltouch  now  or  call  for  a 
demo  at  800-283-5853.  One  look  and  you'll  want  a  OneTouch. 

*2000  Fluke  Networks.  Inc.  U.S.  (800)  283-5853.  fa*  Sack  (800)  FLUKE  FAX. 
Canada  (800)  36-FLUKE.  Europe  (31  *0)  2  678  200.  Other  countries  (425)  446-4519. 
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■  SERVICE  PROVIDER  DEVELOPMENTS 
AT  THE  JUNCTURE  BETWEEN  THE  ENTERPRISE 
AND  THE  NEW  PUBLIC  NETWORK 


Network  Photonics  unveils  switching  technology 

1-D  MEMS  enables  simplified  optical  switching. 


Simplifying  optical  switching 

Network  Photonics  proprietary  one-dimensional 
microelectro-mechanical  (1-D  MEMS)  optical  switch 
technology  can  be  used  to  build  digitally  controlled 
optical  cross-connects  that  can  switch  individual 
wavelenghts  of  light  from  DWDM  inputs  to  any  DWDM 
output  ports.  Digital  control  eliminates  the  complex 
analog  controls  associated  with  other  MEMS  technology, 
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■  BY  TERRI  GIMPELSON 

BOULDER,  COLO.  —  Network  Photon¬ 
ics  has  unveiled  an  optical  switching 
technology  designed  to  lower  service 
providers’  equipment  cost  and  space 
requirements  by  obviating  the  need  for 
dense  wavelength  division  multiplexers. 

Called  CrossWave,  the  technology  inte¬ 
grates  wavelength  demultiplexing,  switch¬ 
ing  and  multiplexing  to  enable  dynamic 
wavelength  switching.  CrossWave  will  be  a 
building  block  for  all-optical  wavelength 
cross-connects  (WXC)  that  switch  DWDM 


■  Avici  Systems  last  week  named 
Chris  Simpson  senior  vice  president 
of  worldwide  sales,  marketing  and 
service.  He  will  report  to  Avici  CEO 
Steve  Kaufman.  Simpson  most 
recently  served  as  senior  vice  presi¬ 
dent  of  sales  for  Ciena.  From  1998  to 
2000,  Simpson  was  vice  president  of 
sales,  marketing  and  international 
operations  for  Harris’  RF  Com¬ 
munications,  and  from  1988  to  1998, 
he  held  several  senior  sales  and  mar¬ 
keting  positions  at  Qualcomm,  in¬ 
cluding  senior  vice  president/general 
manager  of  worldwide  sales  and  mar¬ 
keting,  and  senior  vice  president  of 
strategic  marketing,  www.avici.com 

■  Optical  Communication 
Products,  a  fiber-optic  subsystem 
manufacturer,  announced  the  avail¬ 
ability  of  its  coarse  wavelength  divi¬ 
sion  multiplexing  transceivers  with 
eight-channel  capability. 

The  products  were  designed  for 
metropolitan-area  networks  and 
high-speed  premises  networks.  The 
transceivers  provide  eight  wave¬ 
length  channels  from  1470  nm  to  1610 
nm,  and  are  available  in  a  multirate 
format  from  100M  bit/sec  Ethernet 
up  to  Gigabit  Ethernet,  including  OC-3 
and  OC-12.They  support  SONET/- 
SDH.  ATM  and  Fibre  Channel  ser¬ 
vices.  www.ocp-inc.com 


wavelengths  optically  without  converting 
them  to  electrical  bits. 

This  increases  network  efficiency  be¬ 
cause  it  eliminates  the  need  for  repeated 
optical-electrical-optical  (OEO)  conver¬ 
sions  of  traffic,  Network  Photonics  says. 

In  addition  to  WXCs,  Network  Photon¬ 
ics  says  CrossWave  can  be  used  to  de¬ 
velop  dynamic  optical  add/drop  multi¬ 
plexing  (OADM)  modules  for  the  metro¬ 
politan,  long-haul  and  ultralong-haul  net¬ 
works.  The  company  also  says  its  tech¬ 
nology  can  be  used  to  develop  a  hybrid 
cross-connect  by  combining  the  WXC 
capability  with  grooming  optical  core 
switches  (OCS).  This  hybrid  OCS  man¬ 
ages  wavelengths  and  groomed  services, 
is  highly  scalable,  costs  less  and  can 
reduce  OEO  requirements,  Network 
Photonics  says. 

CrossWave  integration  is  achieved  by 
combining  one-dimensional  micro- 
electro-mechanical  switching  (1-D  MEMS) 
technology  and  a  wavelength  dispersion 


element,  which  is  a  prism¬ 
like  component. The  disper¬ 
sion  element  spatially  sepa¬ 
rates  wavelengths  from 
input  fibers  and  focuses 
them  on  the  surface  of  a 
micromirror,  where  the 
switching  occurs. 

The  dispersion  element 
then  recombines  the 
switched  wavelengths  into 
DWDM  signals  that  exit 
onto  desired  output  fibers. 

CrossWave  uses  a  linear 
array  of  silicon  micromir¬ 
rors  that  switch  between 
two  positions,  such  as  left 
and  right.  Each  mirror 
switches  a  single  wave¬ 
length  in  100  microsec¬ 
onds,  50  times  faster  than 
switching  technologies  such  as  2-D  and 
3-D  MEMS,  Network  Photonics  says. 

The  mirrors  are  controlled  with  simple 


digital  electronics,  the  company  says, 
which  eliminates  the  need  for  multiple, 

See  Photonics,  page  44 


NetVmg  homes  in  on  multi-ISP  nets 

Products  probe  traffic  to  select  best-performing,  least-expensive  paths. 


■  BY  JIM  DUFFY 

SAN  JOSE  —  Control  of  rout¬ 
ing  through  a  multi-ISP  network 
is  becoming  a  hot  market. 


Route  control  refers  to  the 
ability  to  gauge  performance 
of  application  transactions 
through  a  “multihomed”  Inter¬ 
net  service  —  a  network  of 


ISPs  —  and  then  reprogram 
routers  to  select  the  best-per¬ 
forming  routes,  regardless 
of  ISP 

The  latest  company  to  air  its 
plans  is  NetVmg,  which 
was  founded  18  months 
ago.  Others  targeting  the 
market  include  newcom¬ 
ers  RouteScience  Techno¬ 
logies  and  SockEye. 

NetVmg’s  products  in¬ 
clude  probes  that  employ 
three  techniques  for  mon¬ 
itoring  flow  performance 
and  a  device,  called  Flow 
Director,  that  overrides 
the  Border  Gateway  Pro¬ 
tocol  route  tables  in  a 
router  to  steer  flows  to  the 
best-performing  or  least- 
expensive  ISP 
The  three  probing  tech¬ 
niques  employed  by  Net¬ 
Vmg  include: 

•  Synthetic,  which  syn¬ 
thesizes  transactions  and 


measure  them  as  they  traverse 
the  network.  A  drawback  is 
that  this  sort  of  probing  can  be 
inaccurate. 

•  Attachment  of  a  Web  file,  in 
this  case  a  small  .GIF  file,  onto 
the  interactions  that  take 
place  between  a  Web  client 
and  server  to  monitor  the  per¬ 
formance  of  those  transac¬ 
tions  (start-up  RouteScience 
also  uses  this  technique). This 
only  works  for  Web  transac¬ 
tions,  but  has  the  added  bene¬ 
fit  of  being  able  to  make  deci¬ 
sions  based  on  the  actual 
users  generating  traffic. 

•  Passive  monitoring  of 
actual  traffic.  NetVmg  consid¬ 
ers  this  to  be  the  most  accu¬ 
rate  way  to  gauge  perfor¬ 
mance,  although  observers 
say  overhead  can  be  a  con¬ 
cern  when  running  certain 
applications. 

“These  techniques  aren’t 

See  NetVmg,  page  44 


■ 

Location: 

NETVMG 

San  Jose 

Founded: 

May  2000 

Products: 

Probes  and  applications  to  measure  route 
performance  and  establish  reroute  policies  in 
multihomed  networks. 

Management: 

Samer  Salameh,  CEO;  Allwyn  Sequeira, 
senior  vice  president,  technology;  Eric  Wolford, 
senior  vice  president,  marketing  &  business 
development. 

Financing: 

$57  million 

Customers: 

Service  providers  and  large  corporations. 

Fun  fact: 

The  NetVmg  technical  advisory  board  is  a  cross- 
section  of  representatives  from  vendors,  service 
providers,  research  institutes,  venture  capital 
firms  and  large  companies. 
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edia  servers  will  bring  new 


A  new  breed  of  vendors  hope  to  push  the  adoption  of  advanced  voice  offerings. 


services 


■  BY  TIM  GREENE 

As  service  providers  slow  their 
spending  on  gear  to  make  the 
transition  to  versatile  packet- 
based  networks,  one  piece  of 
network  equipment  that  spans 
legacy  and  next-generation  net¬ 
works  may  buck  that  trend. 

Media  servers,  general-purpose 
processing  workhorses,  plug  into 
traditional  voice  networks  or 
packet  voice  networks  to  deliver 
services  such  as  voice  recogni¬ 
tion  and  voice-to-text  messaging. 
They  crunch  packets  on  behalf 
of  service  software,  packages 
that  define  new  services  and 
reside  on  media  servers  or  on 
other  application  servers. 

Under  the  instruction  of  the 
service  software,  the  media 
server  might  convert  voice  into 
text  for  a  unified  messaging  ser¬ 
vice,  or  process  speech  to  trig¬ 
ger  the  appropriate  recorded 
answer  in  a  voice-activated 
response  service. 

The  services  these  devices 
support  will  be  attractive  in  a 
number  of  ways.  For  example,  a 
company  might  buy  a  service 
that  lets  callers  navigate  their 
automated  attendant  using  nor¬ 


mal  speech  rather  than  punch¬ 
ing  phone  digits. 

Also,  internal  salesforces  can 
use  the  same  type  of  voice-acti¬ 
vated  services  to  automate 
access  to  key  data  they  need 
when  they  are  on  the  road. 

This  valuable  functionality  is 
keeping  the  money  flowing  for 
young  companies  that  are  devel¬ 
oping  these  devices, says  Morgan 
Jones,  a  general  partner  with 
Battery  Ventures. 

Battery  has  invested  in  media 
server  maker  IP  Unity  and  Jones 
sits  on  its  board. 

“Telecom  in  general  is  in  a  very 
tough  situation,  but  [media 
servers]  will  have  an  easy  time 
compared  with  the  rest  of  the 
marketplace,”  Jones  says. 

This  is  because  this  type  of 
equipment  lets  carriers  quickly 
create  new  services  while  mini¬ 
mizing  the  number  of  new 
boxes  the  provider  needs  to 
manage. 

The  alternative  is  strapping 
together  multiple  devices  to 
deliver  one  new  service. 

“With  a  media  server,  you  can 
use  one  hardware  platform  to 
handle  a  bunch  of  different 
tasks,”  Jones  says. 


Plus,  media  servers  operate 
equally  well  in  traditional  circuit- 
switched  voice  networks  and  in 
newer,  packet-based  networks. 
Indeed,  this  flexibility  is  a  key 
thrust  of  media  server  maker 
ThinkEngine.says  Rick  Saltzman, 
the  company’s  vice  president  of 
business  development. 

And  it  has  venture  capitalists 
and  makers  of  ancillary  gear 
opening  their  purses  to  fund 
companies  focused  on  media 
gateways. 

One  such  company,  Convedia, 
just  landed  $20  million  in.  addi¬ 
tional  venture  funding  to  boost 
its  total  to  $50  million.  IP  Unity 
has  $48  million,  with  $24  mil¬ 
lion  of  that  coming  in  August, 
and  ThinkEngines  has  $15  mil¬ 
lion  and  expects  to  land  a  sec¬ 
ond  round  soon. 

Key  to  the  success  of  these 
companies  is  alliances  with 
other  vendors  that  make  devices 
such  as  traditional  phone  com¬ 
pany  voice  switches,  media  gate¬ 
ways  and  softswitches,  says  Tom 
Jenkins,  vice  president  of  con¬ 
sulting  forTeleChoice. 

“You  want  to  know  who  their 
partners  are  and  what  other  rela¬ 
tionships  they  have,”  Jenkins  says. 


IP  telephony 
prognosis 

While  media  servers  are 
key  to  bringing  about 
next-generation  voice 
services,  they  do  not 
depend  on  service 
providers  transitioning 
to  IP  voice  equipment. 
The  market  for  such 
equipment  is  projected 
to  increase  but  still 
suffer  lagging  sales. 

Projected  worldwide  sales 
of  core  IP  telephony  gear 

(In  millions) 

$8 
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With  close  partnerships,  appli¬ 
cations,  for  example,  can  be 
tightly  integrated  with  the 
media  server,  he  says.  Without 


such  partnerships,  the  applica¬ 
tions  and  media  server  might 
work  together,  but  not  as  well  or 
be  more  difficult  to  set  up. 

IP  Unity  just  announced  an 
alliance  with  softswitch  vendor 
Sylantro,and  both  Convedia  and 
ThinkEngines  have  alliances 
with  Telica. 

Vendors  dedicated  to  media 
servers  have  cropped  up  in 
greater  numbers  during  the  past 
year,  notes  Tom  Valovic,  an  ana¬ 
lyst  at  market  research  firm  IDC. 
Others  in  this  area  include 
SnowShore  and  Mockingbird 
Networks,  he  says. 

These  companies  also  com¬ 
pete  with  Nortel,  Lucent  and 
other  larger  network  companies 
that  make  less-flexible  media- 
server-like  devices. 

So  far,  IDC,  which  predicts  how 
well  network  devices  will  sell, 
has  no  numbers  on  the  media 
server  market  or  which  company 
is  likely  to  perform  well. 

“Some  are  positioning  them¬ 
selves  for  major  growth  when 
voice  over  IP  really  hits  the  pub¬ 
lic  network,"  Valovic  says. 

Meanwhile,  they’ll  jockey  for 
position  hoping  to  catch  the  big 
wave.  ■ 


Photonics 

continued  from  page  43 

more  complex  components. 
Network  Photonics  developed 
this  1-D  MEMS  technology  inter¬ 
nally  and  has  more  than  30 
patents  pending. 

Unlike  2-D  MEMS  or  3-D  MEMS 
technology,  Network  Photonics 
says  1-D  technology  requires  a 
single  port  per  fiber,  not  per 
wavelength.  The  company  also 
claims  that  its  1-D  MEMS  tech¬ 
nology  uses  smaller  mirrors  that 
occupy  a  fraction  of  the  chip  on 
which  they  are  housed. 

How  it  scales 

The  technology  scales  in  two 
different  ways.  First,  wavelength 
count  can  be  increased  by 
increasing  the  number  of  mir¬ 
rors  on  a  1-D  MEMS  chip. 
Second,  the  fiber  port  count 
can  be  increased  by  reengi¬ 
neering  the  Cross  Wave  compo¬ 
nents,  similar  to  the  way  an 
electrical  cross-connect  fabric 
is  reengineered. 

Two-dimensional  MEMS  tech¬ 


nology  uses  a  2-D  array  of  mir¬ 
rors,  requires  one  port  per  wave¬ 
length  and  is  usually  limited  to 
1,024  mirrors  per  chip.  It  is  not 
easily  scalable,  as  it  requires 
N-squared  mirrors  for  N  number 
of  ports,  Network  Photonics 
says.  As  a  result,  applications  for 
2-D  MEMS  are  generally  limited 
to  less-sophisticated  switching 
requirements. 

Three-dimensional  MEMS  tech¬ 
nology  uses  a  3-D  array  of  mir¬ 
rors  and  requires  one  port  per 
wavelength.  It  uses  2N  mirrors 
for  N  number  of  ports  and  can 
scale  to  thousands  of  ports.  It  is 
typically  used  for  large  core¬ 
switching  applications  but  is 
complicated  and  requires  a  lot 
of  electronics. 

Reliable  business  case 

While  1-D  MEMS  is  apparently 
less  complex  than  2-D  or  3-D 
MEMS,  the  value  lies  in  Network 
Photonics’  financial  stability  and 
solid  business  case  for  1-D,  says 
Lawrence  Gasman,  research  ana¬ 
lyst  for  Communications  Indus¬ 
try  Researchers.  By  virtue  of  its 


simplicity,  1-D  MEMS  is  more 
likely  to  be  able  to  guarantee 
reliability,  the  No.  1  concern  of 
service  providers,  he  says. 

“I’m  very  impressed  with  their 
business  case,”  Gasman  says. 
“They  have  brought  a  realism  to 
the  market  that  the  market  is 
not  the  same  as  it  was  a  year 
ago.  People  keep  coming  out 
with  these  faster  and  faster 
chips,  and  while  they  are  nice, 
there  is  no  evidence  that  these 
products  are  going  to  be 
bought.  Network  Photonics  has 
addressed  several  real  needs 
here:  reliability,  the  need  for 
OXCs  and  the  need  for  OADMs.” 

Network  Photonics  currently 
has  Cross  Wave  systems  avail¬ 
able  for  customer  and  partner 
testing  and  plans  general  prod¬ 
uct  availability  for  early  next 
year.  ■ 
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NetVmg 

continued  from  page  43 

new,”  says  Dave  Passmore, 
research  director  at  The  Burton 
Group.“Vendors  that  do  network 
performance  monitoring  have 
been  doing  this  for 
years.  But  now  it’s 
being  put  to  use 
in  the  multihoming 
decision." 

Once  performance 
has  been  measured 
through  the  multi¬ 
homed  network,  Net- 
Vmg’s  Flow  Director 
can  inject  policies 
into  an  edge  router 
at  a  Web  hosting 
data  center  or  large 
corporation.  These 
policies  instruct  the 
router  to  send  traffic  on  the 
best-performing  or  least-expen¬ 
sive  path,  based  on  the  impor¬ 
tance  of  that  traffic,  time  of  day 
or  other  factors. 

Not  only  do  users  see  better 
routing  performance  through 
the  multihomed  network,  they 


see  dramatic  cost  savings  from 
using  least-cost  routes  as  much 
as  possible  —  savings  as  much 
as  30%  to  70%,  NetVmg  says. 

And  in  those  cases  where  ser¬ 
vice  providers  use  Multi-proto- 
col  Label  Switching  (MPLS)  or 
constraint-based 
routing,  Flow  Di¬ 
rector  will  simply 
select  those  paths, 
provided  they  are 
the  better-perform¬ 
ing  or  lower-cost 
alternative. 

If  not,  Flow  Di¬ 
rector  will  route 
around  them. 

“Flow  Director  is 
orthogonal  to 
MPLS  and  Diff- 
Serv,"  says  Eric  Wol¬ 
ford,  a  senior  vice 
president  with  NetVmg.Nt’s  still 
IP  to  us.” 

Product  pricing  starts  at  around 
$20,000.Typical  configurations  for 
Internet  data  centers  and  large 
companies  cost  from  $150,000  to 
$300,000,  Wolford  says. 

NetVmg:  www.netvmg.com 
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GIGABIT  ETHERNET,  SONET,  ATM.  SHOOT,  IF 
YOU  WANTED  A  NETWORK  MADE  OF  HAM, 
WE  COULD  PROBABLY  CONNECT  TO  IT. 


Bandwidth 


with  Brains 


Not  just  connect  to  it,  but  deliver  profitable  services 
over  it.  At  Riverstone  Networks',  our  RS  family  of  routers 
delivers  wire-speed  metropolitan  area  services  over 
any  network,  including  Gigabit  Ethernet,  10-Gigabit 
Ethernet,  SONET/SDH,  ATM,  WDM,  TDM,  and  cable. 
In  fact,  Riverstone  routers  convert  raw  bandwidth  into 
profitable  services  in  all  parts  of  the  Metropolitan  Area 
Network.  Whether  it's  dynamic  bandwidth  provisioning, 
MPLS-based  VPNs,  tiered  services,  or  anything  in 
between,  Riverstone  customers  profit  from  intelligent 
bandwidth  on  both  legacy  and  next  generation 
networks.  All  Riverstone  technology  scales  across  the 
entire  product  line,  from  our  compact  RS  1000  Optical 

Metro  Access  Router,  right  up  to  the  RS  38000,  our 

.  ■  .  ' 

170  Gigabit  Metro  Core  Router.  To  build  a  network 

that  really  brings  home  the  bacon,  contact  Riverstone 

.  '  '  . 

at  1-877-778-9595,  or  visit  riverstonenet.com/nww. 
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THE  STRAIGHT  GOODS  ON  e-BUSINESS  PLATFORMS. 


Our  open  e-Business  platform  embraces 
diversity.  Making  all  of  this  stuff  work 
together  is  what  our  stuff  is  all  about. 


IF  AT  FIRST  YOU  DON’T 
SUCCEED,  THROW  SOME  MORE 
MONEY  AT  IT. 


We  lead  in  enterprise 
portal  technology. 
We  dominate  in 
enterprise  wireless 
solutions.  And  we 
have  some  of  the 
best  middleware 
integration  solutions 
found  on  our  planet. 


We  can  deliver  ROI 
with  a  sense  of 
immediacy. 


IT'S  ALL  OR 
NOTHING. 


The  Big  Bang  Theory: 
You  need  to  do  all  of 
this  at  once.  Not.at  all. 


website,  but  you  really  don't  have  an 
e-Business.  Our  proven  e-Business 
platform  totally  delivers  end-to-end 
functionality.  It  integrates 
every  single  aspect  of  your 
business.  What's  more, 
it  has  the  scalability 
to  constantly 
integrate  your 
new  components 
into  the  mix.  Like 
say,  10,000  brand  new 
customers,  for  example. 


Implement  in  the 
way  that's  right  for 
your  firm.  From  the 
bottom  up.  Or  the 
top  down.  Component  by  component. 
It's  your  choice. 

Call  1 -800-8-SYBASE  or  visit 
www.sybase.com/myths  and  we'll  show 
you  how.  Fact,  not  myth. 


I  Sybase 

Information  Anywhere’ 


©2001  Sybase,  Inc.  All  rights  reserved.  All  trademarks  are  the  property  of  their  respective  owners. 


A  WEBSITE  IS  A  PORTAL. 

A  PORTAL  IS  AN  e-BUSINESS. 

Unless  your  data  has  the  ability  to 
travel  from  a  customer's  pager  to 
your  trusty  OS/390  mainframe  and 
then  back  to  your  customer  via  cell 
phone,  you  may  very  well  have  a 


THE  WHOLE  e-BUSINESS 
THING  IS  A  FAD. 


Nothing  could  be  further  from 
the  truth.  In  times  of  economic 
downturn,  it  may  seem  prudent  to 
put  the  whole  e-Business  issue  on  the 
backburner.  But  it's  not.  Tough  times 
call  for  nimbleness  and  agility  more 
than  ever.  The  time  to  get  smart  and 
implement  e-Business  solutions  for  your 
customers  is  today. 


THE  INTERNET 
CHANGES 
EVERYTHING. 


The  Internet  does  not 
change  everything. 
It  doesn’t  change  the 
business  rules  that 
run  your  company. 

Or  the  infrastructure 
you've  spent  years 
building.  The  Internet 
is  obviously  a 
critical  part  of  any 
e-Business.  But  it's 
how  well  you  manage 
the  information 
traveling  over  the 
Net  that  determines 
the  success  of 
your  business. 


IT’S  A 

ONE-BRAND 

WORLD. 


This  myth  surrounds 
just  about  every 
significant  e-Business 
platform  discussion. 
Virtually  every 
purveyor  of  e-Business 
platforms  touts  their 
version  of  this 
"one-brand"  world. 
Their  brand,  of  course. 
Big  surprise. 


At  Sybase,  we  know  it’s  just  not  true. 
Countless  brands  compete,  cooperate 
and  commingle  inside  your  company. 


It's  laughable  to  pretend  that  any  one 
external  organization  can  "standardize" 
all  the  various  protocols,  systems, 
components,  new  technologies, 
languages,  databases  and  vendor 
relationships  that  your  business 
depends  on  to  succeed. 


Hah.  Very  funny.  But  a  popular  belief 
for  a  long  time.  Listen:  That's  pure 
poppycock.  Real  e-Business  solutions 
deliver  real  business  results.  That 
means  increased  revenues,  reduced 
costs  and  profits  to  your  bottom  line. 


At  Sybase,  we  deliver  e-Business 
solutions  to  the 
FORTUNE  500,®  the 
largest  firms  on  Wall 
Street,  the  biggest 
names  in  healthcare, 
the  world's  largest 
computer  and 
networking  companies, 
the  biggest  players  in 
Europe  and  Asia. 


SYBASE  e-BUSINESS  SOFTWARE. 
BECAUSE  EVERYTHING  WORKS  BETTER  WHEN 
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SHAPING  YOUR  NETWORK 


OFDM  avoids  AC  power-line  noise 


■  BY  BRIAN  MARKWALTER 

With  the  convergence  of  broadcast  en¬ 
tertainment  and  broadband  access,  the 
demand  to  send  digital  voice,  video  and 
Internet  data  within  the  home  will  in¬ 
crease.  The  cost  of  installing  in-home  wires 
to  support  this  is  expensive,  disruptive  and 
time  consuming. 

With  multiple  outlets  in  every  room,  res¬ 
idential  power  lines  are  already  the  most 
pervasive  network  in  the  world.  However, 
communication  on  the  AC  power  line  is 
extremely  difficult  because  of  its  unfavor¬ 
able  communication  characteristics  — 
specifically,  line  noise. 

Rather  than  fighting  through  the  noise, 
some  companies  are  working  with  a  tech¬ 
nology  that  lets  signals  travel  around  the 
noise.  Orthogonal  Frequency  Division 
Multiplexing  (OFDM),  which  is  the  foun¬ 
dation  of  the  HomePlug  Powerline  All¬ 
iance  industry  specification,  is  one  such 
approach. 

OFDM  is  a  discrete  multitone  technology 
in  which  numerous  signals  of  different  fre¬ 
quencies,  called  carriers,  are  combined  to 
form  a  single  signal  for  transmission.  Prior 
to  combining,  each  carrier  is  first  “phase 
shifted,”  or  modulated,  for  the  purpose  of 
representing  data  bits.  By  modulating  data 
bits  on  individual  signals  prior  to  combin¬ 
ing  them,  many  data  bits  can  be  transmit¬ 
ted  over  a  small  amount  of  time. 

Maximizing  bits  while  minimizing  the 
time  to  transport  those  bits  increases 
throughput.  After  each  carrier  is  modulated, 
the  signals  are  sent  through  the  OFDM 
engine,  which  combines  the  carriers  into 
one  signal  that  represents  all  the  bits  to 


■  HOW  IT  WORKS 


OFDM 

Orthogonal  Frequency  Division  Multiplexing  is  a  technique 
used  by  the  HomePlug  Powerline  Alliance  to  avoid  line  noise 
in  a  residential  power-line  network. 


Broadband 
content  from  cable 
modem,  DSL  or 
satellite  is  fed  to 
home  gateway. 


By  plugging 
gateway  into 
any  electrical 
outlet,  content 
is  bridged  to 
any  HomePlug- 
enabled  device. 


OFDM  takes 
multiple  signals  of 
different  frequencies 
and  combines  them 
to  form  one  signal  to 
avoid  line  "noise". 


n 


HomePlug  network 
monitors  power  lines 
for  “noise."  If  noise 
occurs  on  a  particular 
frequency,  OFDM 
engine  shifts  trans¬ 
mission  to  another 
frequency. 


be  transmitted.  As  an  example,  Home- 
Plug  technology  modulates  data  bits  on 
84  individual  carrier  frequencies  ranging 
from  4  MHz  to  21  MHz. 

HomePlug  technology  enhances  OFDM’s 
basic  functionality  by  comparing  each  in¬ 
dividual  modulated  carrier  with  the  char¬ 
acteristics  of  the  power  line  medium.  It 
then  determines  which  specific  carriers 
will  experience  high  attenuation  or  noise 
impulses  that  will  affect  their  abilities  to 
transport  data  successfully  HomePlug  tech¬ 


nology  automatically  adapts  to  characteris¬ 
tics  of  the  medium  by  determining  a  thresh¬ 
old  in  which  successful  communication 
can  occur.  If  the  attenuation  or  noise  is  too 
great  for  successful  communication  at  a 
specific  frequency,  HomePlug  technology 
will  not  use  carriers  in  that  frequency 
HomePlug  technology  constantly  moni¬ 
tors  the  power-line  medium  for  sudden 
changes  in  communication  characteris¬ 
tics.  As  the  communication  path’s  ability  to 
carry  data  changes  with  respect  to  time, 


the  technology  dynamically  adapts  and 
turns  on  and  off  carriers  to  ensure  suc¬ 
cessful  communication  continues.  By  con¬ 
stantly  adapting  to  the  power-line  medium, 
high-speed  communication  can  be  guar¬ 
anteed  at  every  outlet  pair. 

In  addition  to  the  changing  power-line 
characteristics,  noise  spikes,  which  can 
occur  at  any  time  and  last  just  a  microsec¬ 
ond,  can  also  disrupt  a  datastream.  Given 
their  random  nature,  simple  adaptation  is 
not  dynamic  enough  to  mitigate  the  prob¬ 
lem,  and  forward  error  correction  is  em¬ 
ployed.  By  incorporating  error  correction 
methods,  the  technology  can  reconstruct 
any  bits  that  have  been  damaged  during 
transmission. These  error  correction  meth¬ 
ods  surround  the  information  bits  with 
data  “protection”  bits  that  contain  the  nec¬ 
essary  information  to  reconstruct  the  infor¬ 
mation  if  the  data  arrives  damaged. 

HomePlug  leverages  the  performance 
and  pervasiveness  of  the  Ethernet  proto¬ 
col  while  making  enhancements  to  ad¬ 
dress  today’s  real-time  applications,  such 
as  priority  bit  fields.  This  ensures  timing- 
critical  applications,  such  as  voice  over  IR 
get  priority 

HomePlug  technology  incorporates  so¬ 
phisticated  encryption  techniques  built 
into  the  hardware  so  all  packets  automati¬ 
cally  are  encrypted  before  transmission 
over  the  power-line  medium.This  results  in 
a  clean  transmission  from  one  room  of 
your  house  to  the  next  while  appearing  as 
noise  to  your  neighbor. 

Markwalter  is  the  director  of  program  man¬ 
agement  at  Intellon.  He  can  be  reached  at 
brian.  markwalter@intellon.  com. 


Dr.  Internet 


By  Steve  Blass 


We're  using  network  address  translation  on  a 
Cisco  160.  We've  installed  Web  servers  and  pop¬ 
ped  open  Port  80.  We  can  access  the  Web  site 
externally  through  a  domain  name  or  IP  address, 
but  internally  we  can  only  access  it  through  the 
NAT  address.  We  use  an  external  DNS  server  from 
our  ISP  to  resolve  host  names.  What's  missing? 

Packets  from  your  intranet  whose  destination  is 
the  external  IP  address  of  the  NAT  Web  server 
may  look  like  an  IP  spoofing  attack  when  arriv¬ 


ing  as  inbound  packets  from  outside  and  thus  be 
blocked.  You  can  use  the  Cisco  IOS  debug  com¬ 
mands  to  see  what  happens  at  the  router  when 
you  try  to  connect.  Debug  command  documenta¬ 
tion  is  available  at  www.cisco.com/univercd/cc/ 
td/doc/product/software/ios120/12supdoc/debug 
_r/dintro.htm.  Follow  the  “technical  documents" 
link  at  www.cisco.com  and  look  under  “config¬ 
uration  guides  and  command  references”  for 
your  version  of  IOS.  The  easiest  solution  in  a 
Windows  environment  would  be  to  use  the  Web 


server's  NetBIOS  name  when  connecting  from 
intranet  PCs  instead  of  the  fully  qualified  domain 
name.  In  a  mixed  environment,  Unix  systems 
would  need  a  local  hosts  file,  or  name  service 
mapping  a  hostname  to  the  Web  server  address. 
In  a  larger  environment,  use  an  internal  DNS 
server  for  the  internal  domain. 

Blass  is  a  network  architect  at  Change® 
Work  in  Houston.  He  can  be  reached  at 
dr.internet@changeatwork.com. 


22  NetworkWorld  10  8  01 

GEARHEAQ 
INSIDE  THE 
NETWORK 

MACHINE 

Mark 
Gibbs 


Following  up  on  our  recent  discussions 
of  Trivial  FTP  (www.nwfusion.com, 
DocFinder:  6334),  Stuart  Berman 
wrote  to  point  out  some  other  graphical 
user  interface-based  TFTP  implementa¬ 
tions:  “Weird  Solutions  makes  a  great  [for 
pay]  TFTP  server  application  called  Turbo 
TFTP  [we  like  the  features  and  security  it 
offers]  www.weirdsolutions.com/product/ 
index.html.  And  Cisco  distributes  a  rather 
basic  but  free  TFTP  implementation  from 
Network  TeleSytems  at  www.cisco.com/ 
pcgi-bin/tablebuild.pl/tftp.” 

But  where  were  we?  Oh  yeah,  Proxomi- 
tron,  a  “universal”  Web  filter  proxy  First, 
some  feedback.  Zeke  Crater  wrote:  “I  en¬ 
joyed  reading  your  article  on  Proxomitron, 
but  using  Proxomitron  (or  any  other  proxy 
server  like  WebWasher)  doesn’t  fix  the 
problem.  Instead,  Proxomitron  only  cir¬ 
cumvents  the  problem  on  individual  PCs, 
leaving  the  other,  less  gearheaded  Internet 
users  to  continue  to  suffer.  To  fix  the  prob¬ 
lem  would  require  eliminating  browser 


Technology  Update 


Finalizing  fine  filtering 


and  Java  support  for  such  features.” 

Zeke,  were  with  you  but  eliminating 
browser  and  Java  support  won’t  happen 
so  Gearhead  will  happily  settle  for  a  rea¬ 
sonable  solution  such  as  Proxomitron. 

Our  old  friend  Phil  Daley  wrote, “But  does 
it  work  in  conjunction  with  an  already 
installed  company  proxy  server?” 

You  bet  your  URLs  it  can.  Proxomitron 
has  an  option  that  lets 
you  define  multiple  proxy 
servers  to  relay  through 
and  forwarding  to  any 
proxy  or  switching  off 
proxy  chaining  can  be 
done  on  the  fly  any  time. 

A  curious  feature  is  the 
ability  for  automatic  rota¬ 
tion  between  multiple 
proxy  servers.  If  anyone  can  explain  why 
this  is  desirable  we  would  be  most  grateful. 

A.  Nonymous  asked  how  proxying  works. 
When  you  configure  your  browser  to  use  a 
proxy  (including  Proxomitron),  the  brows¬ 
er  knows  that  it  needs  to  include  the  full 
URL  in  an  HTTP  request  (such  as  “GET 
//www.  nwfusion.com/columnists/gear 
head.html”)  instead  of  just  the  tail  (“GET/ 
columnists/gearhead.html”)  as  the  brows¬ 
er  would  normally  do.  Without  the  server 
name  (or  its  IP  address),  the  proxy  would¬ 
n’t  know  where  to  direct  the  request. 


When  the  proxy  receives  the  full  URL,  it 
forwards  the  tail  to  the  target  server  and  re¬ 
ceives  the  response  (an  error  or  the  re¬ 
quested  content)  .The  proxy  then  relays  the 
response  (possibly  modified  as  in  the  case 
of  Proxomitron)  back  to  the  original 
requesting  browser. 

Proxomitron  can  be  configured  to  listen 
for  HTTP  requests  on  any  port  you  like, and 
can  listen  in  “promiscu¬ 
ous”  mode  —  the  latter 
feature  letting  you  run  a 
copy  of  Proxomitron  on  a 
PC  that  will  provide  proxy 
services  to  a  group  of  PCs 
(normally  Proxomitron 
will  only  accept  connec¬ 
tions  to  “localhost”  or 
127.0.0.1). 

Proxomitron  can’t  distinguish  between 
internal  and  external  nets.  If  you’re  thinking 
of  using  Proxomitron  as  a  gateway  be¬ 
tween  your  LAN  and  the  Internet  you  will 
have  to  front  Proxomitron  with  a  tool  such 
as  Zone  Alarm  (www.zonealarm.com/). 

If  you  don’t  do  something  to  restrict  ac¬ 
cess,  people  on  the  ’Net  can  use  your  Prox¬ 
omitron  as  an  anonymous  proxy  to  hide 
their  IP  address  while  surfing.  One  of  the 
biggest  consequences  of  this  would  be  the 
erosion  of  your  bandwidth. 

You  can  configure  Proxomitron  to  filter 
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Web  page  content,  both  incoming  and  out¬ 
going  HTTP  headers  and  freeze  GIF  ani¬ 
mation.  You  can  even  kill  any  given  con¬ 
nection  on  the  basis  of  the  requested  URL 
—  so  if  you  have  a  centrally  shared  Proxo¬ 
mitron  server  it  will  be  easy  to  block  re 
quests  for  “naughty”  sites. 

The  supplied  filters  are  extensive  and  in¬ 
clude  such  gems  as  “Banner  Blaster,” 
which  “takes  any  image  that  looks  like  an 
advertisement  and  replaces  it  with  a  plain 
text  link.” 

Another  interesting  filter  is  “Hide 
Browsers  Referrer  from  JS.”  The  author 
Scott  Lemon  notes,  “The  ‘referrer’  is  by  far 
the  most  revealing  data  your  browser 
sends  out.  By  looking  at  referrer  lists, 
Webmasters  can  tell  not  only  the  site  you 
visited  last,  but  if  you  clicked  a  link  from 
e-mail  or  a  page  on  your  hard  drive;  possi¬ 
bly  more  personal  information  as  well! 
Note  this  is  normally  revealed  in  an  HTTP 
header  named  ‘Referrer’  but  JavaScript  can 
be  used  to  grab  this  information  as  well.” 

There’s  so  much  more  to  this  product  that 
we  strongly  recommend  you  check  it  out. 
Without  doubt, Proxomitron  is  an  outstand¬ 
ing  tool  and  collects  nine  gear  teeth  out  of 
10,  with  a  commendation  for  being  free. 

Although  we  don 't  proxy  requests  here, 
send  ‘em  anyway  to  gearhead@  gibbs.  com. 
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ule2  digital  camera  Springboard  module. 
Designed  by  IDEO,  the  camera  will  now 
be  distributed  and  branded  by  Hand¬ 
spring.  The  eyemodule,  which  costs  $200, 
lets  you  take  color  or  black-and-white 
photos  in  full  VGA  resolution,  Palm-sized 
images  and  mini  movies. 

A  second  module,  the  16M-byte  back-up 
module,  was  announced  for  Visor  Pro. The 
module  lets  users  back  up  all  their  data  on 
Visor  by  pushing  a  button.  If  the  data 
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Server  app  adds  VPN/firewall 

Celestix  Networks,  which  makes  the 
“smaller  than  a  toaster”  Aries  server 
appliance,  has  come  out  with  Aries 
One,  an  integrated  and  “secured  by 
Check  Point”  VPN/firewall.  Aries 
One  combines  Check  Pbint  Soft¬ 
ware’s  VPN- 1 /Firewall- 1  SmallOffice 
software  with  the  Aries  hardware 
appliance. 

The  appliance  includes  a  300-MHz 
CPU,  128M  bytes  of  RAM  and  a  6G-byte 
hard  drive.  It  has  two  PC  Card  Type  II 
slots  for  additional  modems  or  network-  \ 
interface-card  interfaces,  a  serial  port 
and  two  Universal  Serial  Bus  connec¬ 
tions.  Aries  One  is  available  now  for  about 
$600.  It's  geared  toward  small  offices,  or 
remote  and  branch  offices  of  larger  com¬ 
panies.  Go  to  www.celestix.  com  for  more 
information. 


Handspring  takes  over 
eyemodule2  distribution 

Handspring  recently  an¬ 
nounced  it  was  taking  over 
distribution  of  the  eyemod- 


The  popular, 
eyemodule  2 
camera  is  now  a 
Handspring  v 
offering. 


Full-color  IP  screen  phone 

Avaya  has  a  new  IP  telephone  that  has  a 
full-color,  touch-sensitive  screen  that  can 
display  Web  content,  call  status,  directory 
data  and  other  information.  The  Avaya 
4630  IP  Screenphone  can  be  used  to  ac¬ 
cess  things  such  as  corporate  Web  sites, 
airline  flight  status,  financial  data  and  cor¬ 
porate  directories. 

Customer  trials  of  the  phone  have  be¬ 
gun,  and  the  product  is  slated  for 
general  availability  in  December  for 
$1,000.  Go  to  wwwl.avaya.com/enter 
prise/solutions/product3.html  for  more 
information. 


New  camera  from  Olympus 

Olympus  has  announced  Camedia 
E-20N,a  5-megapixel  digital  camera  that 
will  sell  for  about  $2,000  when  it  is 
released  later  this  month.The  cameras 
high  resolution  will  let  users  take  pic¬ 
tures  of  up  to  11  by  14  inches.  The 
camera  also  includes  an  interlaced- 
scan  mode  (for  higher  quality)  or  a 
progressive-scan  mode  (of  2.5-mega- 
pixel  resolution),  that  lets  users  take 
photos  of  fast-action  scenes  or  very 
bright  light  with  shutter  speeds  of  up 


to  1/18,000  second. 

Features  include  file  sizes 
of  up  to  15M  bytes  for  large 
prints,  a  manual  focusing 
ring,  manual  zoom  ring,  tradi¬ 
tional-style  focus  screen,  and 
dual  media  card  slots  for 
compatibility  with  Smart¬ 
Media  and  CompactFlash  Type  1  and  2 
memory  cards. 

Camedia  will  ship  with  a  32M-byte  Olym¬ 
pus  SmartMedia  card*  lens  hood,  video 
cable,  Universal  Serial  Bus  autoconnect 
cable,  two  lithium  batteries,  remote  con¬ 
trol,  lens  cap,  strap,  drivers  and  bundled 
software.  Go  to  www.olympus-america 
,com/product.asp?c=15&p=16&s=12& 
product=714  for  more  information. 


is  later  lost,  the  back-up 
module  will  restore  the 
entire  memory  of  the 
handheld.The  module 
costs  $60.  Informa¬ 
tion  on  both  mod¬ 
ules  is  available  at  Avaya  4630 
www.handspring. 
com. 


10  Gigs  in  your  palm 

Terapin  has  released  a  product  called 
Mine,  a  lOG-byte  hard  drive  that  fits  in 
the  palm  of  your  hand.  The  device  sup¬ 
ports  digital  graphic  formats  such  as  GIF 
JPEG  and  BMP  so  you  can  store  photos 
by  downloading  them  directly  from  a 
digital  camera  to  the  Mine  device.  You 
can  then  connect  the  device  to  a  TV  to 
show  the  photos  in  slide-show  format.  It 
also  has  a  10M  bit/sec  Ethernet  jack  for 
network-attached  storage  purposes.  The 
device  operates  on  four  triple-A  batter¬ 
ies,  although  lithium  ion  batteries  or  an 
external  battery  pack  can  also  be  used. 
The  Mine  device  costs  $600  and  is  avail¬ 
able  at  www.goterapin.com/store.html. 

Got  a  cool  product?  Let  us  know  at 
kshaw@nww.  com. 
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Introducing  Dell  PowerConnect  Network  Switches 


We're  performance,  reliability  and  value,  like  you'd  expect  from  Dell  PowerEdge  Servers,  now  in  a  network  switch, 


MX  PowefConnect  3014 


Dell  |  Small  Business 

PowerConnect™  2016/2024'  Switch 


Cost-Efficient  and  Easy-to-use  Unmanaged  Switches 

•  16  and  24  Port  Fast  Ethernet  Switches 

•  Easy  to  Install;  No  Configuration  Needed 

•  Slim.  Rack  Mountable  111  Form  Factor 

•  1-Vr  NBD  Parts  Included* 


From 


5169 


Business  Loan:  $5/mo.,  48  mos.” 


Recommended  upgrade: 

•  3-Yr  NBD  Parts*;  from  $29  99 

PowerConnect™  3024'  Switch 


Scalable,  Flexible  Managed  Switches 

•  24  Fast  Ethernet  Ports  plus  2  Gigabit  Ethernet  Ports 

•  12.8  Gbps  of  Total  Switching  Capacity 

•  Remote  Access  and  Management  Capabilities 

•  Built-in:  2  GBIC  Slots  and  2  Gigabit  Ethernet  Ports 

•  3-Yr  NBD  Parts  Included* 


Business  Loan:  S19/mo„  48  mos." 

5699 


Recommended  upgrade: 

•  3-Yr  4  Hour  Parts5’  (7x24);  add  $79.99 

PowerConnect™  5012'  Switch 


High  Performance  All-Gigabit  Managed  Switches 

•  10  Full  Wire-Speed  Copper  Gigabit  Ports 

•  24  Gbps  of  Total  Switching  Capacity 

•  Built-in:  2  GBIC  Slots  for  Copper  or  Fiber  Uplinks 

•  Remote  Access  and  Management  Capabilities 

•  3-Yr  NBD  Parts  Included* 


>1299 — - - 


Recommended  upgrade: 

•  3-Yr  4  Hour  Parts5’  (7x24).  add  $129.99 


PowerEdge™  1400SC  Server 

Small  Business  Value  Server 

•  Intel®  Pentium®  III  Processor  at  933MHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SCRAM 

•  18GBM10K  RPM)  Ultra3  (Ultra  160)  SCSI  HD 

•  Embedded  Intel®  Pro/1 00+ 

•  Embedded  Ultra3  (Ultra  160)  SCSI  Controller 

•  3-Yr  NBD  Bronze  On-Site  Service5 

•  7x24  Phone  Tech  Support 


$999 o 


Business  Loan:  $28/mo.,  48  mos." 
E-VALUE  Code: 
10198-290909 


Oh,  did  we  mention  that  you  can  save 
up  to  50%  or  more  on  our  switches  versus 
those  other  switches?  When  you  combine 
reliable  Dell  PowerEdge™  servers  -  powered 
by  Intel®  Pentium®  III  processors  -  with  Dell 
PowerConnect™  Network  Switches,  you  can  expand  your  network 
without  breaking  the  bank.  And  we're  all  backed  by  Dell's  award- 


PowerEdge™  2550  Server 

New  High  Performance  2U  Server 

•  Intel®  Pentium®  III  Processor  at  933MHz 

•  Dual  Processor  Capable 
•128MB  133MHz  ECC  SCRAM 

•  18GB5  (1 0<  RPM)  Ultra3  (Ultra  160)  SCSI  HD 

•  Embedded  Gigabit  NIC  and  Intel®  10/100  NIC 

•  Dual  Channel  Ultra3  SCSI  Controller 

•  3-Yr  NBD  Bronze  On-Site  Service3 

•  7x24  Phone  Tech  Support 


Business  Loan:  $52/mo.,  48  mos." 
E-VALUE  Code: 
10198-290918 


winning  service  and  support.  Which  means  you  get  one  single  point 
of  contact.  So,  whether  you're  expanding 
your  network  with  Dell  PowerEdge 
servers  or  with  Dell's  new  line  of 
PowerConnect  Network  Switches,  you  get 
quality  technology  at  an  affordable  price. 


Sdj 

pentium®/// 
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Growing  your  network.  Easy  as  H 


Visit  www.dell.com/switch  or  call  toll  free  at  1-800-545-9674. 


Call  M-F  7a-9p  Sat  12p-6p  Sun  12p-5p  CT.  Valid  with  Small  (BSD  and  BASDJ  Business  Center  purchases  only.  Offer  valid  on  new  system  purchases.  Limit  5  systems  per  customer.  Prices, 
specifications  and  availability  may  change  without  notice  Taxes  and  shipping  charges  extra,  and  vary  Can  be  combined  with  other  offers  or  discounts.  U  S.  only. 

•This  device  has  not  been  approved  by  the  Federal  Communications  Commission  for  use  in  a  residential  environment.  This  device  is  not,  and  may  not  be,  offered  for  sale  or  lease,  or  sold  or  leased 
for  use  in  a  residential  environment  until  the  approval  of  the  FCC  has  been  obtained 


Dell  PCs  use  genuine  Microsoft  Windows 
www.microsoft.com/piracy/howtotell 


■For  a  copy  of  our  Guarantees  or  Limited  Wattanties.  write  Dell  USA  LP.,  Attn:  Warranties.  One  Dell  Way.  Round  Rock,  Texas  78682.  Service  may  be  provided  by  third  party.  Technician  will  be  dispatched, 
if  necessary,  following  phone-based  troubleshooting.  To  receive  Next-Business-Day  service,  Dell  must  notify  service  provider  before  5  pm  (depending  on  service  contract)  customer  time  Availability  vanes 
Tor  bard  drives.  GB  means  1  billion  bytes,  accessible  capacity  varies  with  operation  environment  "Monthly  payment  based  on  48-MONTH  12.49%  INTEREST  RATE  FOR  QUALIFIED  BUSINESS  CUSTOMERS 
OFFER  VARIES  BY  CREDITWORTHINESS  OF  CUSTOMER  AS  DETERMINED  BY  LENDER  Taxes,  fees  and  shipping  charges  extra  and  vary  Business  Loan  from  CIT  Online  Bank  to  small  business  customers 
with  approved  credit  Replacement  unit  (depending  on  service  contract)  may  be  provided  by  third-party  provider  Replacement  unit  will  be  dispatched  if  necessary  following  phone-based  troubleshooting 
For  7x24  service,  a  replacement  unit  will  be  dispatched  within  4  houts  of  determining  the  hardware  problem.  Available  within  a  125-mile  radius  of  over  80  metropolitan  areas  Customers  not  located  within 
a  125-mile  radius  of  the  stocking  locations  are  not  eligible  for  this  offering  Available  in  the  U  S.  only  "Replacement  unit  (depending  on  service  contractl  may  be  provided  by  third-party  provider  Replacement 
unit  will  be  dispatched  if  necessary  following  phone-based  troubleshooting.  To  receive  next  business  day  service.  Dell  must  notify  the  service  provider  before  5pm  (depending  on  service  contractl  customer 
time  Availability  vanes  Dell,  the  stylized  E  logo.  E'VALUE.  PowerEdge  and  PowerConnect  are  trademarks  of  Dell  Computer  Corporation  Intel,  the  Intel  Inside  logo,  Pentium  and  Intel  Celeron  are  trademarks 
ot  registered  trademarks  of  Intel  Corporation  ot  its  subsidiaries  in  the  United  States  or  other  countries  MS.  Microsoft.  Windows  NT  and  Windows  are  registered  trademarks  of  Microsoft  Corporation  3Com 
and  Fast  Ethetlmk  are  registered  trademarks  of  3Com  Corporation  Trinitron  is  a  registered  trademark  of  Sony  Corporation.  Dell  cannot  be  held  responsible  for  errors  in  typography  or  photography  ©2001 
Dell  Computet  Corporation.  All  rights  reserved 
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VALUE 


USE  THE  POWER  OF 
THE  E-VALUE  CODE. 

Match  our  latest  technology 
with  oor  latest  prices  Enter  the 
E-VALUE  code  online  or  give  it 
to  your  sales  rep  over  the  phone 
www  dell  com/evalue 
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EDITORIAL 

John  Dix 

Biting  into 
Bluetooth 

Bluetooth  has  taken  its  fair  share  of  knocks.  It’s  too 
expensive,  too  late,  too  ambitious.  But  when  you 
see  it  in  action,  the  practicality  of  this  point-to- 
point,  limited-distance  wireless  technology  is  immedi¬ 
ately  apparent. 

3Com  just  announced  an  external  Bluetooth  USB 
adapter  that  complements  the  Bluetooth  PC  Card  the 
company  currently  sells,  and  I  tried  both  gizmos  to  see 
what  Bluetooth  is  all  about. 

The  new  USB  adapter  is  a  $170  self-contained  device 
about  two-thirds  the  size  of  a  hot  dog.  It  has  a  clever  flip- 
up  antenna  and  is  designed  to  be  carried  around  in  a 
briefcase.  Pretty  neat,  but  you  need  the  software,  too,  so  it 
isn’t  likely  you’ll  be  swapping  this  from  machine  to  ma¬ 
chine  unless  you  don’t  have  a  free  PC  Card  slot  for  the 
more  sensible  card  version. 

But  the  real  beauty  of  the  3Com  Bluetooth  implementa¬ 
tion  is  in  the  software,  which  is  the  same  for  both  prod- 
ucts.You  can  get  this  stuff  up  and  running  in  a  heartbeat 
and  immediately  start  swapping  files. 

The  products  require  Windows  98  or  newer.  1  tried  the 
card  in  a  Compaq  Presario  running  Windows  Millennium 
Edition  and  the  USB  device  on  a  Presario  running  2000. 
The  only  instructions  are  printed  on  the  CD  folder:  Drop 
in  CD,  install  card/USB  device,  load  software. You’re  then 
asked  to  name  your  PC  and  pick  a  password. 

In  use,  you  launch  the  software,  and  it  scans  for  other 
Bluetooth  devices  and  returns  icons  representing  each 
one  and  their  respective  names.To  send  a  file,  you  drag  it 
over  the  icon  for  that  device,  which  launches  a  pop-up 
asking  for  the  password  of  that  machine,  which  you  need 
to  get  from  the  device  owner. 

Before  transmission  begins,  the  intended  recipient  gets 
a  pop-up  saying,  essentially,  “X  is  trying  to  send  you  Y  Do 
you  want  to  accept?” 

I  sent  a  4.6M  byte  MP3  file  in  a  minute  and  a  half. To 
gauge  range,  1  walked  one  machine  about  60  feet  away 
and  still  managed  to  get  the  attention  of  the  other 
machine. 

So  where  would  you  use  this?  The  key  benefit  would  be 
for  impromptu  file  sharing  at  meetings  or,  say  printing 
something  on  someone  else’s  printer. The  beauty  is  it  is 
peer-to-peer  and  doesn’t  require  network  access  or  per¬ 
missions.  Another  nifty  application:  seat-to-seat  communi¬ 
cations  on  airplanes.  Apparently  the  Federal  Aviation 
Administration  has  approved  use  of  Bluetooth. 

The  trick,  of  course,  will  be  critical  mass.  Bluetooth  will 
only  be  valuable  if  enough  people  use  it.  I'd  give  it  a  50-50 
chance  of  making  it  at  this  point. 

—  John  Dix 
Editor  in  chief 
jdix@nww.com 
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Time  to  unify 

Regarding  Howard  Anderson’s  column  “Wireless 
Tower  of  Babel  is  set  to  collapse”  (www.nwfu 
sion.com,  DocFinder:  6323):  I  don’t  see  how 
Anderson  can  classify  Europe  as  being  even 
more  screwed  up  than  the  U.S.  Practically  the 
entire  rest  of  the  world  uses  GSM.  Here  in  the  U.S., 
we  have  Time  Division  Multiple  Access,  Code 
Division  Multiple  Access,  GSM  and  Integrated 
Digital  Enhanced  Network.  I  agree  that  users 
don’t  care  which  technology  is  used,  they  just 
want  great  national  coverage.  But  we  get  what  we 
pay  for.  Having  four  different  networks  in  the  U.S. 
lowers  prices  for  consumers.  If  we  want  great 
national  coverage,  we  are  going  to  get  it  with 
some  sort  of  unified  national  network.The  move 
to  3G  will  bring  the  U.S.  closer  to  being  compati¬ 
ble  with  the  rest  of  the  world.  Maybe  prices  won’t 
continue  to  drop  on  service,  but  service  will 
improve. 

Matt  Grab 
MIS  administrator 
Cindy  Rowe  Auto  Glass 
Harrisburg,  Pa. 

IT  turnaround 

Regarding  Mark  Gibbs’“Backspin”  column  “IT/users 
should  learn  to  play  nice”  (www.nwfusion.com, 
DocFinder:  6325):  1  work  for  a  111-year-old  com¬ 
pany  and  when  1  took  over  the  IS  department  it  was 
the  most  hated  internal  service  group  in  the  com¬ 
pany  It  took  five  years  of  hard  work,  a  good  sense  of 
humor  and  a  commitment  to  excellent  customer 
service  by  my  staff  to  turn  this  around. This  year  in 
our  internal  customer  survey  we  were  rated  the 
highest  of  any  service  group  in  the  company  I  have 

E-mail  letters  to  jdix@nww.com  or  send  them  to  John  Dix,  editor  in 
chief,  Network  World,  1 18  Turnpike  Road,  Southborough,  MA  01 772. 
Please  include  phone  number  and  address  for  verification. 


found  it  is  critical  for  the  IS  department  to  commu¬ 
nicate  changes  frequently  and  in  terms  users  can 
relate  to  —  not  geek  speak.  1  think  Gibbs’  IT  Council 
idea  is  an  excellent  way  to  start  a  turnaround. 
However,  I  think  most  IT  groups  will  get  discour¬ 
aged  in  the  beginning  because  they  will  take  many 
hits  on  the  chin  before  things  improve. 

Robb  Good 

Vice  president,  director  of  information  systems 

Sundt  Construction 
San  Diego 

An  impossible  standard 

Regarding  Kevin  Tolly’s  column  “Windows  2000 
Server:  Unsinkable*”  (www.nwfusion.com,  Doc¬ 
Finder:  6324):  The  worst  repercussion  of  such 
illicit  boasting  comes  in  the  form  of  unreal  cus¬ 
tomer  expectations. “Five  nines”  has  already 
become  a  buzzword  in  our  industry,  setting  a 
standard  that  is  simply  impossible  to  maintain.  I 
think  I’ll  just  copy  Microsoft’s  caveats  straight 
into  my  next  service-level  agreement,  but  this 
time  in  24-point  flashing,  bold,  underlined  italics. 

Matt  Syme 
Logan,  Utah 

The  99.999%  uptime  really  relates  to  the  fact 
that  the  server  has  improved,  with  back-up  fea¬ 
tures  switching  to  another  server  when  yours 
crashes.  It’s  not  that  Windows  2000  is  such  an 
improvement  over  Windows  NT  4.0;  it  just  allows 
more  failover  capability  to  switch  to  another 
working  server.  It’s  pretty  pathetic  that  Microsoft’s 
only  real  selling  point  is  that  Windows  Server 
2000  won’t  crash  —  meaning  you  won’t  get  the 
blue  screen  of  death. They  won't  say  that  it  won’t 
freeze,  won’t  respond  or  won’t  be  usable. 

*  Alan  Spiegelman 
New  York 
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TOTALLY  UNPLUGGED 

Ira  Brodsky 

The  attacks  in  New  York  and  Washing¬ 
ton,  D.C.,  have  sparked  a  national 
debate  about  whether  we  are  willing 
to  give  up  some  of  our  rights  in  exchange 
for  greater  security.  One  side  argues  that 
any  curtailment  of  citizens’  rights  would 
hand  victory  to  the  terrorists.The  other  side 
claims  that  when  citizens  are  murdered  they  lose  all  their 
rights.Countless  others  are  intimidated  into  modifying  their  life¬ 
styles,  which  is  exactly  what  the  terrorists  want. 

We  can  and  must  harness  the  Internet  as  a  weapon  in  the  war 
against  terrorism.  But  first,  we  must  renew  our  commitment  to  basic 
freedoms.  Then  we  must  develop  a  better  understanding  of  where 
privacy  ends  and  information  begins.  Only  by  drawing  clear  bound¬ 
aries  can  we  ensure  both  security  and  citizens’  rights. 

Internet  surveillance  entails  nothing  more  than  gathering  raw  data 
—  strings  of  ones  and  zeros. We  should  not  be  afraid  to  collect  mas¬ 
sive  amounts  of  data  as  long  as  we  limit  government’s  ability  to 
extract  information.  For  example,  we  could  require  that  a  computer 
program  sift  through  the  data  to  ensure  only  information  relevant  to 
the  investigation  at  hand  reaches  human  eyes. 

Although  there  is  no  constitutional  right  to  privacy,  our  courts 
have  recognized  that  government  invasion  of  privacy  is  often  a  pre¬ 
lude  to  attacks  on  basic  rights. Still,  we  let  law  enforcement  officials 
eavesdrop  on  telephone  conversations  when  there  is  sufficient 
cause.  There  is  no  reason  not  to  treat  ’Net-based  communications 
the  same. 

I  propose  the  creation  of  a  ’Net-based,  virtual  national  security 


Build  our  security  infrastructure 


infrastructure.  This  infrastructure  would  gather  raw  data  on  a  24-7 
basis  using  a  combination  of  ordinary  user  devices  and  devices 
installed  only  for  that  purpose.  But  even  in  the  most  extreme  cases, 
government  would  only  gain  access  to  a  fraction  of  the  data. 

It  comes  down  to  this:  We  have  given  terrorists  what  Attorney  Gen¬ 
eral  John  Ashcroft  calls  a  “competitive  advantage"  by  letting  them 
use  PCs,  the  Internet  and  satellite  phones  while  we  obsess  about  pri¬ 
vacy.  We  must  regain  the  upper  hand  by  ensuring  that  they  who  fight 
terrorists  are  equipped  with  the  very  best  technology. 

One  way  to  accomplish  this  would  be  to  use  the  Internet  to  mon¬ 
itor  suspects  —  not  only  by  examining  their  e-mail  but  by  review¬ 
ing  their  business  transactions  and  following  their  movements. 
Digital  cameras,  3G  wireless  and  voice  over  IP  are  technologies  that 
promise  unprecedented  capabilities  for  gathering  data  anywhere, 
anytime. 

It’s  not  inevitable  that  ubiquitous  Webcams  would  be  used  by  the 
government  to  spy  on  ordinary  citizens.  Courts  could  require  sifting 
through  videostreams  using  automatic  face  recognition  software,  or 
they  could  restrict  government  access  to  specific  times,  places  and 
purposes. 

We  must  start  now  to  make  better  use  of  technology  in  an  effort  to 
avoid  even  more  deadly  terrorist  attacks.  Because  if  such  attacks 
occur,  they  will  almost  certainly  result  in  emergency  security  mea¬ 
sures  infringing  our  basic  rights. 


We  must  regain 
the  upper  hand 
by  ensuring  that 
they  who  fight 
terrorists  are 
equipped  with 
the  very  best 
technology. 


Brodsky  is  president  of  Datacomm  Research,  a  consultancy  in 
Chesterfield,  Mo.  He  can  be  reached  at  ibrodsky@datacomm 
research.com. 


ABOVE  THE  CLOUD 

James  Kobielus 

The  instant-messaging  interoperability 
wars  are  far  from  over,  but  the  smoke  is 
beginning  to  clear  from  some  of  the  nas¬ 
tier  standards  battles.  During  the  past  few 
months,  the  nascent  IM  industry  has  begun  to 
rally  around  an  emerging  Internet  Engi¬ 
neering  Task  Force  standard  known  as 
SIMPLE  —  an  ironic  acronym  that  stands  for  the  specification’s  com¬ 
plex  name:  Session  Initiation  Protocol  for  IM  and  Presence  Leveraging 
Extensions.  SIMPLE  is  based  on  SiPa  signaling  and  presence  protocol 
used  to  establish  Internet  phone  calls,  multimedia  conferences,  chat 
sessions  and  interactive  communications. 

SIMPLE  is  the  IM  industry’s  leading  candidate  for  a  universal  stan¬ 
dard,  thanks  to  several  recent  industry  developments.  First,  the  IETF 
formed  a  working  group  earlier  this  year  to  develop  the  specification 
into  an  open  standard,  using  prior  work  by  the  older  Instant  Messaging 
and  Presence  Protocol  working  group.  Then,  during  the  summer,  AOL 
Time  Warner  publicly  committed  to  implementing  SIMPLE  in  its  AOL 
Instant  Messenger  (AIM)  service  gateway  to  third-party  IM  services  and 
products.  For  its  part,  Microsoft  announced  it  is  implementing  SIMPLE 
in  its  Windows  XP  and  .Net  products.  Other  IM  industry  players  have  fol¬ 
lowed  AOLs  and  Microsoft’s  lead,  voicing  their  general  support  for  SIM¬ 
PLE,  although  few  have  announced  SIMPLE-compliant  products. 

Clearly,  AOLs  and  Microsoft’s  decisions  to  support  SIMPLE  swung  mar¬ 
ketplace  momentum  toward  this  emerging  standard.  AOL’s  support  was 
especially  critical,  given  its  predominance  in  today’s  IM  marketplace.lt 
has  held  the  industry  at  bay  for  the  past  three  years  by  refusing  to  inter¬ 
connect  its  IM  services  with  third-party  IM  offerings  unless  those  ven¬ 
dors  license  AOLs  proprietary  technical  interfaces.  Now  AOL  has 
opened  the  door  to  third-party  interconnection  through  a  SIMPLE  gate¬ 
way,  which  it  has  just  begun  to  test  with  Lotus, a  longtime  AIM  licensee. 

These  are  positive  developments  to  be  sure,  but  we’re  still  a  long  way 
from  true  interoperability  in  the  IM  market.  SIMPLE  is  not  yet  a  formal 


SIMPLE,  but  more  complex 


IETF  standard  and  has  yet  to  be  implemented  in  any  commercial  IM 
products  or  services.  SIMPLE  will  be  implemented  in  the  Windows 
Messenger  component  of  the  forthcoming  Windows  XP  desktop,  but 
Microsoft  hasn’t  indicated  when  its  MSN  and  Exchange  IM  servers  will 
be  upgraded  to  support  SIMPLE, so  it’s  not  clear  what  value  XP’s  SIMPLE 
interface  will  provide  out  of  the  box.  Indeed,  AOL  and  Microsoft  have 
not  publicly  stated  whether  or  when  they  plan  to  phase  out  their  pro¬ 
prietary  IM/presence  protocols  in  favor  of  SIMPLE. 

Where  interoperability  is  concerned,  the  IM  world  is  a  deep  quag¬ 
mire.  The  industry  is  still  in  the  prestandards  era,  much  the  same  situa¬ 
tion  in  which  the  e-mail  industry  found  itself  10  years  ago,  before 
Simple  Mail  Transfer  Protocol  was  adopted  universally  The  IM  market 
suffers  from  a  surfeit  of  proprietary  protocols,  and  no  interoperability 
specifications  has  yet  achieved  broad  adoption  in  the  marketplace. 
Until  the  major  IM  product  and  service  providers  implement  SIMPLE 
natively,  we  will  not  have  true,  any-to-any  backbone  IM  interoperability 

IM  and  presence  cannot  be  truly  enterprise-grade  services  until  the 
industry  converges  on  open  interoperability  specifications.  Until  then, 
companies  will  have  to  explore  second-best  solutions.  Consequently 
the  premium  for  the  next  several  years  will  continue  to  be  on  partial 
interoperability  solutions  among  diverse  IM/presence  environments. 
One  approach  is  to  implement  “multiservice  clients”  that  can  access 
several  incompatible  IM  services  concurrently  Another  is  to  deploy  “IM 
softswitches”  for  server-to-server  bridging. 

The  bottom  line,  then,  is  SIMPLE  will  not  appreciably  simplify  the 
interoperability  outlook  in  the  IM  world  for  another  two  to  three  years, 
at  the  earliest.  The  installed  base  remains  Balkanized  among  diverse, 
incompatible,  vendor-proprietary  protocols,  and  SIMPLE  just  adds 
another  pattern  to  an  already-crazy  quilt. 


Where  inter¬ 
operability  is 
concerned, the 
IM  world  is  a 
deep  quagmire. 


Kobielus  is  an  analyst  with  The  Burton  Group.  He  can  be  reached  at 
(703)  924-6224  or  jkobielus@tbg.com.  The  opinions  expressed  are 
his  own. 


“Car*  I  implement 
voice  over  IP  now? 


What’s  the  best  way 
to  deploy  QoS?” 


“How  can  I  improve 
security  across  my 
network?” 


Got  questions  about  the  WAN? 


AWAY! 


As  the  next-generation  wide-area  network  (WAN) 
evolves,  network  and  IT  professionals  like  you  are 
faced  with  a  new  set  of  critical  questions. 

There's  no  better  place  to  get  answers  than 
Network  World’s  State  of  the  WAN:  Extending  Your 
Network’s  Reach. 

This  interactive  Town  Meeting  is  your  chance  to 
fire  technical  and  strategic  questions  at  WAN  experts 
who  won’t  duck  the  tough  ones.  Go  head-to-head 
with  leading  vendors  shaping  the  future  of  the  WAN. 
Share  ideas,  experiences  and  knowledge  with  peers 
who  face  the  same  challenges  as  you. 
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—  NEW  DATES  — 


STATE™  wan 

Extending  Your  Network’s 
Reach 

A  Network  World  Town  Meeting 


BOSTON,  MA 

October  9 

NEW  YORK,  NY 

October  10 

WASHINGTON,  D.C. 

October  11 

CLEVELAND,  OH 

October  16 


ATLANTA,  GA 

October  17 

CHICAGO,  IL 

October  18 

LOS  ANGELES,  CA 

October  23 

SAN  JOSE,  CA 

October  24 


Join  industry  experts  Dr.  Jim  Metzler,  founder  of 
Ashton,  Metzler  and  Associates,  John  Gallant,  president  and 
editorial  director  of  Network  World,  and  Sandra  Gittlen, 
events  editor  at  Network  World,  for  a  focused  discussion  of 
the  most  pressing  issues  facing  WAN  managers  today.  Walk 
away  with  the  knowledge  you  need  to  tackle  VPNs,  security, 
VoIP,  quality  of  service,  MPLS,  network  access  and  more. 

Do  what  more  than  5,000  satisfied  network  and 
IT  professionals  have  already  done  —  attend  this  FREE 
Network  World  Town  Meeting.  Register  now  for  State 
of  the  WAN:  Extending  Your  Network’s  Reach  and  be 
prepared  to  fire  away! 

GOLD  EXHIBITING  SPONSOR: 


SBS 

Technologies 


Register  today  at  www.networkworld.com/seminars/wan  or  call  800-643-4668. 


To  become  a  sponsor  of  this  event,  please  contact  Andrea  D’ Amato  at  508-490-6520  or  adamato@nww.com. 


TOWN  MEETING 


Where  technology  leaders  answer  to  you. 


The  future  of  intrusion  detection  is  hybrids  of  network-  and  server-based  products,  faster  speeds 
and  improved  event  correlation  and  analysis.  But  prices  won't  fall. 


Intrusion  battleground  evolves 


Bv  Betsy 
Yocom 
and  Kevin 
Brown, 
Network 
World 
Global 
Test 
Alliance 


Just  as  network  attack  methods  evolve,  so  do  intrusion-detection  systems.  As  the  market 
matures,  expect  to  see  improved  speeds,  better  mechanisms  for  event  correlation  and 
false-positive  alarm  filtering.  New  “hybrid”  approaches  (merging  network-  and  host- 
based  systems)  also  show  promise.  One  thing  you  likely  won’t  see  anytime  soon, 
though,  is  falling  IDS  prices. 


REVIEW 


Intrusion-detection  system 
products  grow  up:  Cisco's 
Secure  IDS  and  ISS's  Real 
Secure  top  our  list. 

Page  54. 


ONLINE 


Looking  for  an  IDS  product? 
Head  online  where  we've  com¬ 
piled  data  on  more  than  30 
products. 

www.nwfusion.com, 
DocFinder:  1622 


Check  out  these 
companies  for  more 
information: 

•  Sygate  (www.sygate.com) 

•  Cisco  (www.cisco.com) 

•  Enterasys 
(www.enterasys.com) 

•  Tripwire  (www.tripwire.com) 

•  Computer  Associates 
(www.ca.com) 

•  Captus  Networks 
(www.captus.com) 

•  Lancope  (www.lancope.com) 

•  SecureLogix 
(www.securelogix.com) 

•  NetlQ  (www.netiq.com) 


■  The  urge  to  merge 

While  network-based  IDS  will  continue  to  protect  a  network’s 
perimeters,  IDS’s  future  is  in  hybrid  solutions,  end  users,  accord¬ 
ing  to  analysts  and  vendors.  Host-based  intrusion  detection 
consists  of  special  software  that  runs  on  servers  and  other 
“host”  platforms. 

Host-based  systems  have  an  advantage  on  encrypted  connec¬ 
tions,  such  as  Secure  Sockets  Layer  Web  sessions,  or  on  VPN  con¬ 
nections,  because  they  can  see  the  data  unencrypted.  On  the 
other  hand,  a  network-based  detection  system  cannot  decrypt 
data  and  so  it  just  lets  it  pass.  Some  attacks  exploit  this  shortcom¬ 
ing  of  network-based  systems. 

Babak  Salimi,  director  of  product  management  at  Sygate  Tech¬ 
nologies,  says  network  IDS  nodes  placed  at  critical  network  ag¬ 
gregation  and  entry  points  will  provide  an  extra  level  of  protec¬ 
tion  —  as  part  of  a  hybrid  approach  to  intrusion  detection  that 
includes  all  types  of  IDS  products. 

Joel  McFarland,  IDS  product  marketing  manager  at  Cisco,  agrees 
that  a  layered  solution  of  network-  and  host-based  detection  sys¬ 
tems  will  evolve.  He  says  network-based  systems  provide  the 
broadest,  most  pervasive  coverage,  especially  when  an  IDS  is  well- 
integrated  into  the  network  fabric.  Ciscos  Catalyst  6000  IDS  mod¬ 
ule  can  be  integrated  with  Cisco  routers,  Catalyst  switches  and 
the  Cisco  PIX  firewall. 

But  McFarland  says  it’s  also  imperative  to  deploy  host-based 
protection  on  corporate  and  'Net  servers  that  support  critical 
business  resources.  Cisco  recently  introduced  the  Cisco  IDS  Host 
Sensor  to  complement  its  Catalyst  switch-based  IDS  product.  Re¬ 
siding  on  servers,  the  host-based  software  detects  malicious  activ¬ 
ity  and  blocks  access  to  resources  to  prevent  serious  damage. 

Chris  Petersen,  IDS  product  marketing  manager  at  Enterasys, 
says  IDS  will  be  a  combination  of  technologies,  including  host, 
network  and  the  hybrid  products.The  objective,  Petersen  says,  is 
to  gain  visibility  across  the  entire  company  about  what’s  occur¬ 
ring  on  the  router,  switch  and  servers,  among  others,  and  forward 
that  information  to  an  intelligent  system  that  can  make  the  right 
decisions,  based  on  aggregation  and  correlation  of  notification 
messages  coming  from  throughout  the  company 

■  Intelligent  analysis  needed 

Petersen  and  others  agree  on  the  need  for  intelligence  — 
human  and/or  mechanical  —  to  analyze  the  data  IDS  systems 
produce.  Many  note,  too,  that  security  expertise  is  often  lacking  on 
IT  technical  staffs. 

Jon  Garside,  business  manager  of  security  solutions  at  Com¬ 
puter  Associates,  says  the  hybrid  IDS  products  will  support  artifi¬ 
cial  intelligence,  which  is  needed  to  correctly  interpret  the  volu¬ 
minous  security  information  that  IDS  products  report. 


The  current  state  of  IDS  products  (see  “IDS  products  grow  up,” 
page  54)  includes  event  and  correlation  applications.  Even  so, 
most  are  not  sophisticated  enough,  and  vendors  are  addressing 
this.  Cisco  is  building  correlation  circuits  into  its  new  manage¬ 
ment  console  to  let  IDS  products  aggregate  information  from 
multiple  systems. 

Because  security  poses  serious  challenges  to  in-house  technical 
staffs, some  users  are  deciding  whether  to  outsource  intrusion 
detection.Thomas  Scavo,  information  security  architect  for  Dow 
Jones  &  Company  says  outsourcing  must  be  done  carefully  be¬ 
cause  there’s  so  much  at  stake.  Users  are  also  concerned  with  the 
costs  of  outsourcing. 

Sygate’s  Salimi  sums  up  the  outsourcing  issue:There  is  no  “one 
size  fits  all.”  Budgets, staffing, security  expertise,  organization  and 
other  factors  must  go  into  the  decision,  he  says. 

■  False-positive  alarm  filtering 

Another  improvement  needed  is  for  IDS  products  to  filter  out 
false-positive  alarms.  Richard  Helgeson.CEO  of  Captus  Networks, 
says  IT  departments  at  large  companies  often  don’t  have  suffi¬ 
cient  staffing  to  deal  with  the  thousands  of  alarms  (up  to  98% 
being  false  positives)  that  occur  each  day  Helgeson  says  many 
staffs  often  turn  off  security-event  alarming,  but  then  create  an 
audit  trail  of  the  alarms  for  later,  off-line  analysis. 

Several  IDS  vendors  employ  features  to  filter  false-positive 
alarms.  CAs  eTrust  Intrusion  Detection  product  uses  a  Java  applet 
combined  with  statistics-based  rules  to  filter  them  out.  Lancope’s 
Stealth  Watch  appliance  minimizes  false  positives  with  a  “concern 
index”  mechanism  that  attributes  a  level  of  suspicion  to  each  host 
communicating  on  the  network,  based  on  activity  Alarms  are  sent 
only  when  the  suspicion  level  crosses  a  predetermined  thresh¬ 
old.  Otherwise,  suspicious  activity  is  logged,  but  no  alarms  issued. 

Cisco’s  McFarland  says  tuning  IDS  products  to  respond  to  spe¬ 
cific  attacks  results  in  fewer  falsepositive  alerts.The  company 
builds  a  database  of  information  about  attack  signatures,  includ¬ 
ing  a  description  of  benign  triggers,  into  its  Cisco  Secure  IDS 
product,  formerly  known  as  NetRanger.  Operators  can  use  this 
information  to  tune  the  IDS  to  sitespecific  information.  Cisco  is 
also  building  in  mechanisms  to  limit  the  number  of  repetitive 
alarms  transmitted  to  the  operator  console,  among  other  things. 

■  Should  you  fight  back? 

Another  question  is  whether  an  IDS  should  prevent  attacks  in 
addition  to  detecting  them.  Currently  IDS  products  employ  mech¬ 
anisms  to  “shun”  or  prevent  the  attacks,  but  these  are  usually 
turned  off  by  default.The  user  has  to  actively  make  the  decision 
to  apply  the  mechanisms. 

Many  within  the  security  community  contend  that  when  IDSes 


m 

are  set  up  to  automatically  deflect  attacks, 
they  are  open  to  new  vulnerabilities  — 
from  outside  attacks  or  in  response  to 
errors.  Because  the  IDS  responds  automati¬ 
cally,  it  may  be  a  while  before  technical 
staff  realize  that  a  customer  has  been 
blocked  from  entering  the  network. 

For  example,  an  intruder  could  spoof  an 
IP  address  and  send  a  SYN  flood  attack  to 
a  Web  server  to  block  legitimate  user  ac¬ 
cess  to  it.  Or  an  IDS  could  interpret  a  mis¬ 
take  —  someone  using  an  incorrect  ad¬ 
dress  to  access  a  sender,  for  example  —  as 
an  exploit.  In  either  case,  outside  cus¬ 
tomers  are  prevented  from  accessing  re 
sources  on  the  network.  And  it  may  take  a 
while  before  the  IT  staff  realizes  it. 

Helgeson  says  the  Capt-IOG  product 
offered  by  Captus  averts  this  problem  by 
letting  users  remove  prevention  measures 
automatically  after  a  specified  time  period. 
Capt-IOG  is  a  policy-based  product. The 
network  administrator  sets  up  policies  on 
which  alarms  should  be  sent.The  Captus 


product  enforces  the  policy  offering  four 
preventive  actions:  notification  that  an 
event  occurred;  termination  of  traffic  (stop¬ 
ping  the  attack);  throttling  the  traffic  (slow¬ 
ing  down  the  traffic  to  allow  for  analysis); 
or  redirecting  the  traffic  to  a  specified  area. 

Tripwire  also  takes  a  proactive  approach 
to  attack  prevention  by  monitoring  unau¬ 
thorized  or  undocumented  network 
changes  that  could  compromise  a  net¬ 
works  security  Tripwire  CEO  Gene  Kim  says 
if  problems  are  detected  and  fixed  upfront, 
it’s  easier  to  prevent  security  breaches. 

Mark  Collier,  CTO  at  SecureLogix,says 
detection  and  prevention  are  most  effec¬ 
tively  addressed  on  the  same  appliance. 
Ciscos  McFarland  says  a  balance  between 
detection  and  prevention  can  provide 
value  to  customers.  Cisco’s  new  IDS  Host 
Sensor,  for  example,  provides  some  preven¬ 
tion.  It  sits  at  the  operating-system  kernel 
level  of  a  host  device  and  intercepts  mali¬ 
cious  system  calls  and  attacks  before  their 
execution  (thus  preventing  them). 

■  The  need  for  speed 

Network-based  IDS  products  running  on 


conventional  operating  systems  often 
don’t  have  the  system  resources  to  per¬ 
form  traffic  analysis  at  wire  speed.  As  a 
result,  they  can  become  a  bottleneck  in 
the  network. 

IDS  vendors  are  addressing  this  in  vari¬ 
ous  ways.  Cisco  added  IDS  capabilities  on 
a  module  for  its  Catalyst  6000  Series 
switches,  which  can  handle  a  fully  loaded, 
full-duplex  lOOM-bit/sec  link  (see  www. 
nwfusion.com,  DocFinder:  6144). 

But  even  100M  bit/sec  is  not  enough  for 
today’s  network  environments,  so  IDS  ven¬ 
dors  are  working  on  even  higher-speed 
solutions.  Cisco  says  it’s  working  on  very 
high-speed  appliances,  based  on  ASIC 
technology,  to  break  the  current  100M 
bit/sec  IDS  speed  barrier.  Michael  Mych- 
alczuk,a  NetlQ  product  manager,  says  his 
company  plans  to  optimize  its  code  and 
increase  RAM,  so  that  its  Security  Manager 
can  handle  higher  speeds. 

Lancope’s  Stealth  Watch  Threat  Manage¬ 
ment  System  is  an  appliance  based  on 
optical  technology  that  the  vendor  claims 
can  handle  gigabit  speeds.  Enterasys  is 
developing  faster  methods  for  analyzing 


and  processing  packets  on  the  wire  and 
designing  faster  rules  engines  and  archi¬ 
tectures.  The  vendor  is  also  working  on 
dedicated  hardware  systems  that  offer 
faster  net-based  intrusion  detection. 

Some  vendors  are  also  working  on  ways 
to  make  software  more  efficient  in  han¬ 
dling  packet  analyses.  CA  says  it  is  working 
on  software  efficiency  and  placing  rules  in 
RAM  to  increase  the  effectiveness  of  its 
system’s  packet  analysis. 

■  Pricing  holds  steady 

IDS  and  other  security  products  are  still 
in  developmental  phases  and  have  a  long 
way  to  go  before  reaching  commodity  sta¬ 
tus.  So  look  for  prices  on  most  products  to 
remain  about  the  same,  or  even  increase 
slightly  during  the  next  12  months  as  ven¬ 
dors  add  more  sophisticated  features  and 
management  functions. 

Yocom  is  senior  editor  and  Brown  is  lab 
test  engineer  at  Miercom,  an  independent 
testing  lab  in  Princeton  Junction,  N.J.  They 
can  be  reached  at  byocom@mier.com  and 
k  brown  @mier.  com. 


Keeping  the  bad  guys  out  is  easier  to  manage  now. 

IDS  products  grow  up 
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Last  year,  intrusion-detection  systems  were  difficult  to  install,  performance  was  lackluster 
and  management  was  raw 
Things  have  changed. 

IDS  has  evolved  significantly  with  products  now  containing  new  features,  richer  manage¬ 
ment  applications  and  much  better  performance. 


We  tested  five  network-based  IDS  products  and  their  associated 
management  consoles  for  this  review.  We  did  not  include  host- 
based  IDS,  to  ensure  a  true  apples-to-apples  comparison.  We 
tested  products  from  Cisco,  Computer  Associates,  Enterasys 
Networks,  Intrusion.com  and  Internet  Security  Systems  (1SS). 

Two  products  share  the  Blue  Ribbon  Award:  Cisco’s  Secure  IDS 
and  ISS’s  RealSecure.  Enterasys’  IDS  Dragon  had  stellar  perfor¬ 
mance,  but  difficulties  with  installation  and  configuration,  as  well 
as  some  rough  edges  on  the  management,  kept  it  in  second. 

CAs  eTrust  products  made  a  strong  showing  in  management 
and  features.  Its  management  application  was  intuitive  and  logi¬ 
cal,  but  it  entailed  too  many  separate  applications,  which  limited 
its  ease  of  use.  Intrusion.com’s  SecureNet  Pro  was  the  easiest  pro¬ 
duct  to  install;  it  was  running  within  15  minutes.  But  the  product 
had  some  performance  problems,  lowering  its  overall  score. 

■  What  they  offer 

The  IDS  products  from  Cisco,  Enterasys  and  lntrusion.com  are 
appliances,  while  CA  and  1SS  provided  software-based  systems  to 
test  (see  graphic,  page  58).  1SS  also  offers  an  IDS  appliance 


through  a  partnership  with  Nokia,  but  we  did  not  test  that. 

The  network-based  IDS  products  consisted  of  separate  “sensor" 
and  management  functions.The  sensors  watch  passing  traffic 
and  detect  the  attacks,  and  also  perform  functions  related  to 
intrusion  detection. The  system  management  function,  which 
includes  event  management  and  reporting,  was  included  on  a 
separate  console. 

A  variety  of  sensor  platforms  are  employed,  including  Windows, 
Unix,  Red  Hat  Linux  and  Solaris.  With  the  exception  of  Enterasys, 
which  uses  Web  browser  access  for  management,  the  other  prod¬ 
ucts  employ  a  Windows-based  management  server  and/or  client 
software.  In  addition  to  its  Secure  Policy  Manager  application, 
Cisco  Secure  IDS  is  also  supported  by  Cisco  Secure  Director, 
which  we  did  not  test. This  alternative  management  software  runs 
on  Hewlett-Packard’s  OpenView. 

■  Performance 

Several  tests  were  conducted  to  measure  performance.  First,  we 
measured  how  well  the  product  could  detect  a  random  sample 

See  Review,  page  56 
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Portals: 

Build  Them  Right 
And  They  Will  Come 

Fast  on  their  way  to  becom¬ 
ing  the  primary  way  profession¬ 
als  share  and  obtain  information, 
portals  are  red  hot  within  organi¬ 
zations  today.  But  to  paraphrase 
a  popular  movie,  if  you  build  a 
portal,  will  they  come?  And  if 
users  come,  will  they  stay? 

The  short  answer  is,  “not 
necessarily."  The  reason  is  that 
firms  don't  always  take  a  true 
customer-centric  approach  to 
building  portals  to  assure  an 
optimal  user  experience. 

Moreover,  firms  frequently 
underestimate  the  complexity 
of  integrating  legacy  data  and 
other  information  sources  to 
be  linked  with  portals. 

“When  building  portals,  you 
need  to  think  in  terms  of  end  to 
end  business  outcomes  and  the 
complete  lifecycle,”  notes  Terry 
Hisey,  V.  P.  and  G.  M.,  e-Business 
at  Unisys.  “The  corporate  portal 
begins  with  an  alignment 
between  business  and  portal 
strategies  incorporating  the  right 
information  from  whatever 
source,  and  delivering  it  in  a 
productive  and  time-sensitive 
manner  to  a  personalized  inter¬ 
face.”  It’s  all  about  browsing, 
searching,  and  finding  relevant 
content  to  improve  productivity 
and  collaboration. 

To  make  this  dream  a  reality 
for  clients,  Unisys  has  com¬ 
bined  its  rock-solid  experience 
in  consulting  and  integration 
with  breakthrough  patent- 
pending  methodologies.  To 
learn  how  Unisys  can  help 
conceive,  build  and  manage 
world-class  portals,  visit: 
www.aheadforebusiness.com 
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of  commonly  recognized  intrusion  at¬ 
tacks,  such  as  ping  floods,  Jolt2  attacks, 
SYN  floods,  finger  bombs  and  others  (see 
graphic, below). These  were  tested  initially 
under  no  background  traffic  load. To 
achieve  a  passing  score,  the  IDS  had  to 
correctly  identify  the  attack  within  5  min¬ 
utes  of  the  attacks  launch.  We  tallied 
whether  the  intrusion  was  recorded,  if  it 
was  correctly  identified  and  the  approxi¬ 
mate  time  it  took  to  recognize  the  attack. 

Next,  we  ran  stress  tests  to  see  how  the 
products  would  work  as  background  traf¬ 
fic  load  increased  from  40M  to  60M  bit- 
/sec,  then  up  to  90M  bit/sec.  If  we  deter¬ 
mined  that  an  IDS  could  not  detect  an 
attack  under  the  “no  load”  condition,  we 
eliminated  that  attack  from  the  stress  tests. 
A  third  test  determined  whether  the  prod¬ 
ucts  could  detect  attacks  specifically  de¬ 
signed  to  avoid  traditional  IDS  systems. 

Performance  was  scored  on  three  things: 
number  of  attacks  detected,  ability  to  de¬ 
tect  attacks  under  load  (the  stress  tests) 
and  fault  tolerance  (see  “How  we  did  it,” 
www.nwfusion.com,  DocFinder:  6328). 

Enterasys’  IDS  Dragon  took  the  gold  in 


performance.  In  addition  to 
its  excellent  showing  in  the 
first  two  performance  tests, 

Dragon  also  beat  the  com¬ 
petition  by  detecting  at¬ 
tacks  that  are  specifically 
designed  to  avoid  tradi¬ 
tional  IDS  systems.  IDS 
Dragon  also  performed 
with  near  bulletproof  relia¬ 
bility  —  demonstrating 
minimal  performance 
degradation  under  traffic 
load  and  solid  system  sta¬ 
bility  all  during  the  tests. 

The  IDS  Dragon  missed 
only  three  out  of  27  ran¬ 
dom  attacks  and  detected 
24  out  of  the  resulting  24 
attacks  sent  to  it  under  the 
40M  and  60M  bit/sec  traffic 
load. With  the  90M  bit/sec  traffic,  IDS 
Dragon  correctly  detected  2 1  out  of  24  at¬ 
tacks  —  very  good  under  maximum  load. 

No  other  product  performed  as  well  with 
the  basic  intrusion-detection  and  stress 
tests,  although  Cisco  Secure  IDS  performed 
well  under  load,  detecting  19  out  of  21  at¬ 
tacks  sent  to  it  under  40M-,  60M-  and  90-M 
bit/sec  loads. The  ISS  RealSecure  per¬ 
formed  well  under  40M  and  60M  bit/sec 
loads,  detecting  22  out  of  24  attacks,  but  fell 
down  to  1 7  attacks  out  of  24  when  the  traf¬ 


fic  load  went  to  90M  bit/sec. 

Intrusion.coms  SecureNet 
Pro  had  the  hardest  time 
under  heavy  background  traf¬ 
fic  loads.  After  a  strong  start 
—  detecting  24  out  of  27 
attacks  with  no  load  —  per¬ 
formance  steadily  declined  as 
load  subsequently  increased. 
The  SecureNet  detected  only 
four  out  of  27  attacks  under 
the  90M-bit/sec  load.  Cur¬ 
iously,  SecureNet  detected  the 
highest  number  of  attacks 
(25)  under  no  load,  but  sup¬ 
ported  the  smallest  database 
of  known  attack  signatures  of 
the  products  tested. 

All  the  products  tested  did 
well  in  detecting  certain  at¬ 
tacks  —  including  Whisker 
(various  types), Targa3  and  Bind  —  that 
are  specifically  designed  to  evade  net- 
work-based  IDS  products.  Cisco, CA,  Enter¬ 
asys  and  Intrusion.com  detected  16  out  of 
17  attacks,  while  ISS  got  them  all  (see 
graphic  for  the  full  performance  results, 
page  60). 

While  CAs  eTrust  IDS  performed  ade¬ 
quately  in  our  stress  tests,  it  did  not  per¬ 
form  consistently  under  high  (90M 
bit/sec)  loads.  It  appeared  that  the  longer 

See  Review,  page  58 
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Attacks  we  performed 


Name 

Type  of  attack 

Method 

Ping  flood 

Denial  of  Service  (DoS) 

Flooding 

Targa3 

DoS 

Flooding 

Jolt2 

DoS 

Fragmentation,  flooding 

SYN  flood 

DoS 

Flooding 

UDP  flood 

DoS 

Flooding 

WOOf 

DoS 

Buffer  overflow 

Finger  bomb 

DoS 

Buffer  overflow 

SMTP  wiz  backdoor 

Surveillance 

Surveillance  (prbbes) 

SMTP  VRFY 

Surveillance 

Surveillance  (probes) 

SMTP  EXPN  overflow 

DoS 

Buffer  overflow 

POP3  logon  overflow 

DoS 

Buffer  overflow 

Iquery  Bind  exploit 

DoS 

Buffer  overflow 

Bind  8  Transaction  Signatures 

Remote  to  Local  (R2L) 

Buffer  overflow 

IIS  5.0  Visual  Studio  RAD  Support  (fp30reg.dll) 

R2L 

Buffer  overflow 

IIS  5.0  IPP  ISAPI  'Host:' 

DoS 

Buffer  overflow 

MS  and  Indexing  Service  ISAPI  Extension  (idq.dll) 

DoS 

Buffer  overflow 

IIS  5.0  IPP  ISAPI  ’Host:'  (Jill) 

DoS 

Buffer  overflow 

IIS  4.0  ISAPI  (Teso  Crew) 

DoS 

Buffer  overflow 

Telnet  Password  Brute  Force  Vulnerability 

R2L 

Brute  force  password  cracker 

Nmap 

Surveillance 

Port  scanner 

Nmap  (SYN  stealth) 

Surveillance 

Port  scanner 

Superscan 

Surveillance 

Port  scanner 

Netbus 

R2L 

Trojan  horse 

BackOrifice  2K 

R2L 

Trojan  horse 

BackOrifice  2K  (on  a  nonstandard  part) 

R2L 

Trojan  horse 

Stick 

IDS  evasion 

Signature  spoofing 

Whisker 

IDS  evasion 

Signature  encoding,  CGI  exploits 
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In  e-business  everyone  wants  to  unify  higher  enterprise 
performance  with  lower  total  cost.  The  ES7000  goes  further. 
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T he  Unisys  e-@ction  Enterprise  Server 
ES7000  is  no  ordinary  server.  It  does  the 
enterprise-level  transactions  a  CIO 
dreams  about.  And  at  a  total  cost  that 
lets  a  CFO  sleep  at  night.  Powered  by 
our  CMP  architecture,  the  ES7000 
harnesses  32  Intel®  Pentium®  III  Xeon™ 
Processors.  Delivering  a  level  of 
performance  from  Microsoft®  Windows® 
2000  you’d  normally  only  associate  with 
UNIX.  Combining  scalability,  availability, 
and  flexibility  with  all-important 
affordability.  That’s  enough  to  even  unify 
the  CFO  and  the  CIO.  Which  until  now, 
was  an  impossibility.  To  find  out  what 
the  ES7000  can  do  for  your  e-business, 
visit  www.aheadforebusiness.com, 
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we  let  the  background  traffic  stream  run 
(up  to  10  minutes  or  more)  the  less  con¬ 
sistently  the  eTrust  could  detect  the  at¬ 
tacks.  It  was  for  this  reason  that  we  rated 
eTrust’s  performance  a  3  out  of  5. 

With  few  exceptions,  the  products  tested 
were  otherwise  stable.  While  the  ISS  Real- 
Secure  was  generally  stable,  its  perfor¬ 
mance  was  affected  in  one  instance.  When 
we  sent  90M  bit/sec  of  traffic  over  10  min¬ 
utes,  then  launched  an  extended  ping 
flood  for  several  minutes,  RealSecure 
could  not  detect  any  of  the  Internet  In¬ 
formation  Server  exploits  we  tried.  We  also 
noticed  that  running  a  Jolt2  attack  seemed 
to  easily  blind  Intrusion.coms  SecureNet 
for  a  brief  time  after  the  attack  subsided. 

■  Managing  all  this 

All  the  vendors  tested  made  huge 
strides  in  their  management  applications. 
They  all  performed  well  in  generating 
reports,  and  they  all  exhibited  their  ability 
to  adequately  manage  events  and  large 
deployments  of  IDS  sensors. 

Managing  a  large  network  of  sensors  is 
typically  achieved  through  a  three-tiered 
architecture:  a  central  management  con¬ 


sole,  sensors  and  an  event  collector  that 
off-loads  processing  from  the  manage¬ 
ment  console,  but  reports  back  to  it.  Under 
this  arrangement,  one  event  collector 
manages,  for  example,  up  to  50  sensors, 
but  each  management  console  supports 
multiple  event  collectors,  thus  facilitating 
scalability  All  the  vendors  except  CA  have 
embraced  this  model.  CA  doesn’t  use  the 
event  collector,  just  the  sensor  and  man¬ 
agement  console. 

Cisco  and  ISS  tied  for  top  honors  in  this 
category  Cisco’s  Secure  Fblicy  Manager, 
which  runs  on  Windows  NT/98/2000,  sup¬ 
ports  the  best  event  management  along 
with  a  highly  intuitive,  logically  designed 
interface  that  was  a  breeze  to  use.  Items 
were  color-coded  and  easily  sorted,  and 
we  could  configure  which  fields  we  want¬ 
ed  displayed,  easily  viewing  more  (or  less) 
detail, as  we  specified. The  Secure  Fblicy 
Manager  also  has  excellent  reporting  and 
statistics,  featuring  easy-to-use  templates 
for  generating  reports.  Functions  were  well 
integrated  into  Secure  Policy  Manager, 
which  is  slated  to  eventually  become  the 
single  manager  platform  for  all  of  Cisco’s 
security  devices,  including  its  PIX  firewall. 

In  addition  to  Secure  Policy  Manager, 
Cisco  supports  Unix-based  management 
and  an  HP  Open  View-based  platform,  run¬ 
ning  the  Cisco  Secure  Director  plug-in, 
which  was  not  tested  for  this  review.  Our 
only  issue  was  its  management  of  multiple 


sensors.  While  powerful,  it  was  a  bit  cum¬ 
bersome  for  us  to  set  up  and  maintain. 

The  ISS  RealSecure  Manager,  which  re¬ 
sides  on  Win  2000/NT  or  Solaris  plat¬ 
forms,  is  on  par  with  Secure  Policy  Man¬ 
ager,  supporting  excellent  event  manage¬ 
ment,  good  reporting  and  the  best  inte¬ 
gration  of  applications.  One  of  the  earlier 
IDS  vendors,  ISS  has  had  more  time  to 
better  integrate  functions.  Incorporation 
of  a  three-tired  architecture  facilitates 
management  of  multiple  devices,  and 
sensors  are  easily  deployed. 

CA,Enterasys  and  lntrusion.com  were  a 
step  below,  but  were  still  good  in  this  cate¬ 
gory  CAs  eTrust  Intrusion  Detection  Man¬ 
agement,  which  runs  on  Win  98/NT/ 

2000  and  Millennium  Edition  platforms, 
delivered  the  best  statistics  reporting  of  all 
five  products  tested. They  were  compre¬ 
hensive  and  complete.  But  eTrust’s  was 
limited  by  the  use  of  several  different 
applications  that  should  be  integrated.  For 
example,  there  were  separate  applications 
for  real-time  statistics  and  detailed  moni- 
toring.They  would  have  been  more  useful 
if  combined.  With  that,  eTrust’s  manage¬ 
ment  would  be  on  par  with  Cisco  and  ISS. 

While  Enterasys'  Web-browser  based 
Dragon  Fblicy  Manager  had  good  reports 
(we  especially  liked  one  that  let  us  pick 
the  most  common  attack  and  observe  it 
closely)  and  statistics,  its  event  manage 
ment  wasn’t  as  robust  as  the  other  prod¬ 


ucts.  Events  were  displayed  but  couldn't 
be  sorted,  and  we  couldn’t  designate 
which  fields  to  display  We  could  filter 
events,  but  we  found  this  a  tedious  pro¬ 
cess.  We  also  found  the  Dragon  Fblicy 
Manager  difficult  to  navigate. 

However,  it  included  a  good  forensics 
tool  that  let  us  drill  down  into  the  precise 
details  of  attacks  and  analyze  them.  While 
all  the  other  products  supported  a  similar 
feature,  Enterasys  did  it  best.Those  familiar 
with  Unix  will  like  IDS  Dragon’s  Unix- 
based  command-line  interface,  which  is 
traditional  and  familiar.  But  like  CA,  Enter¬ 
asys  needs  to  better  integrate  its  varied  ap¬ 
plication  tools  to  make  its  management 
more  effective  and  efficient. 

lntrusion.com  offers  two  management 
applications:  the  SecureNet  Pro,  an  X-win- 
dows  management  application  for  Linux- 
based  platforms,  and  the  SecureNet  Pro¬ 
vider  Win  2000-based  application,  which 
was  developed  for  better  management  of 
larger  deployments  of  sensors.The  Win¬ 
dows  application  is  well  suited  for 
larger  environments  because  it  employs  a 
three-tired  architecture  while  the  Linux 
application  does  not.  While  both  are  good, 
they  offer  distinctly  different  feature  sets, 
which  we  found  problematic. 

■  Installation  and  ease  of  use 

All  products  tested  were  easier  to  install 

See  Review,  page  60 
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RATING 

Cisco  Secure  IDS  2.21 

Company:  Cisco,  (408)  526- 
4000,  www.cisco.com  Price: 
(as  tested)  $21,000  (includes 
sensor  appliance  and  Secure 
Policy  Manager).  Pros:  Ex¬ 
cellent  event  management; 
flexible  creation  of  custom 
signatures;  very  good  per¬ 
formance.  Cons:  Bulky  4-U  (7 
inches  high)  appliance;  ease 
of  use  compli-cated  by  depth 
of  features;  available  as 
hardware  only. 


RATING 

ISS  RealSecure  6.0 

Company:  Internet  Security 
Systems,  (404)  236-2600, 
www.iss.net  Price:  (as  tested) 
$13,188  (plus  about  $5,000  per 
server  for  event  collector  and 
sensor).  Pros:  Most  logical 
and  intuitive  GUI;  easiest 
product  to  scale;  excellent 
management  of  multiple  sen¬ 
sors.  Cons: Tedious  software 
installation;  nonintuitive  com¬ 
mand-line  interface;  wizards 
need  to  be  more  targeted. 


RATING 

IDS  Dragon  5.0 

Company:  Enterasys 
Networks,  (603)  332-9400, 
www.enterasys.com  Price:  (as 
tested)  $24,500  (includes 
sensors  and  manager).  Pros: 
Outstanding  performance; 
easy  to  install;  excellent 
advanced  forensic  analysis. 
Cons:  Management  interface 
hard  to  navigate;  weak  man¬ 
agement  of  multiple  sensors; 
integration  of  management 
applications  needs  improve¬ 
ment. 


eTrust  Intrusion  Detection 
Engine  1.5 


Company:  Computer 
Associates,  (631)  342-6000, 
www.ca.com  Price:  (as  tested) 
$3,300  (plus  about  $5,000  per 
server  for  sensors).  Pros:  Most 
feature-rich  GUI;  good  man¬ 
agement  of  multiple  sensors; 
low  minimum  system  require¬ 
ments.  Cons: Too  many  soft¬ 
ware  components;  requires 
higher-horsepower  platforms 
for  higher-bandwidth  monitor¬ 
ing,  available  as  software  only. 


RATING 

SecureNet  PDS  5545 

Company:  lntrusion.com  (972) 
234-6400,  www.intrusion.com 
Price:  (as  tested)  $43,985 
(includes  both  Unix  and 
Windows  2000  management 
applications).  Pros:  Easiest 
installation;  excellent  reporting 
from  Win  2000;  well-designed 
LEDs.  Cons:  Requires  multiple 
applications  for  full  function¬ 
ality;  needs  better  integration 
of  features;  no  automatic 
signature  updates. 


What’s  the  score? 

▼ 

Cisco  Secure  IDS 

▼ 

ISS  RealSecure 

IDS  Dragon 

eTrust  Intrusion 
Detection  Engine 

SecureNet  PDS 

Performance  25% 

4 

, 

4 

5 

3 

2 

Management  &  administration  25% 

5 

5 

4 

4 

4 

Installation  &  ease  of  use  20% 

4 

4 

2 

3 

4 

Features  20% 

4 

4 

4 

4 

3 

Configuration  10% 

4 

4 

4 

3 

4 

TOTAL  SCORE 

4.25 

4.25 

3.85 

3.45 

3.30 

individual  category  scores  are  based  on  a  scale  of  1  to  5.  Percentages  are  the  weight  given  each  category  in  determining  the  total  score.  ■  Scoring  Key:  5:  Exceptional  showing  in  this  category. 
Defines  the  standard  of  excellence  4:  Very  good  showing.  Although  there  may  be  room  for  improvement,  this  product  was  much  better  than  the  average.  3:  Average  showing  in  this  category.  Product 
was  neither  especially  good  nor  exceptionally  bad.  2:  Below  average.  Lacked  some  features  or  lower  performance  than  other  products  or  than  expected.  1:  Consistently  subpar,  or  lacking  features  being 

reviewed. 


FREE  EVENT 


FREE  Event.  Space  is  Limited.  Register  today  using  your  VIP  code:  SVPNA 
at  www.networkworld.com/seminars/securityvpn  or  call  800-643-4668. 


Spend  a  day  adding  knowledge  and 
power  to  your  network  security  plan. 


Join  your  colleagues  for  an  educational  one-day  event  that  focuses  on  the 
benefits,  downfalls  and  latest  goings-on  in  the  world  of  network  security.  Produced 
by  Network  World  and  led  by  industry  leader  Joel  Snyder,  PhD  and  Senior  Partner 
of  Opus  One,  this  seminar  highlights: 


®  How  to  create  secure  network  access  on  a  tight  budget 
®  Differences  between  outsourced  VPNs  and  in-house  managed  systems 
®  The  relative  security  of  different  network  options 

®  Integration  of  new  security  services  into  your  existing  network  infrastructure 


Discover  the  latest  products,  services  and  information  surrounding  network  security  and  the  use 
of  VPNs.  Topics  include: 

®  Dynamics  behind  today’s  state-of-the-art  network  security  systems 

®  How  to  know  if  a  VPN  is  the  right  choice  for  your  organization  and  where  can  it  be  used  within  your  network 
®  The  benefits  of  creating  and  maintaining  secure  remote  access  for  your  enterprise 
®  Which  network  security  options  lead  to  decreased  costs 

Connect  with  industry  experts  as  they  provide  up-to-the-minute  advice  on  network  security. 

Topics  include: 

®  Details  on  firewalls,  access  servers  and  how  VPNs  fit  into  the  mix 
®  Benefits  vs.  repercussions  of  implementing  a  network  security  system 
®  Ways  in  which  VPNs  increase  your  organization’s  internal  security 
®  What  the  experts  feel  are  today’s  best  network  security  methods 
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Platinum  Presenting  Sponsors 


Adirati 


Gold  Exhibiting  Sponsors 

CAMELOT  f'PGP 
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To  sponsor  this  premier  Network  World  event,  please  contact  Andrea  D’Amato  at  508-490-6520  or  adamato@nww.com. 
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TECH  UPDATE 


NEW  DATES 

Coming  To  A  City  Near  You. 
Don’t  Miss  Out! 


November  6 
November  7 
November  8 
November  27 
November  28 
November  29 
December  1 2 
December  13 


Detroit,  Ml 
Chicago,  IL 
Dallas, TX 
New  York,  NY 
Washington,  DC 
Boston,  MA 
Los  Angeles,  CA 
San  Jose,  CA 


Let  us  guide  you  in  the 
right  direction! 
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BONUS!  Register  now  using  your  VIP  code:  SVPNA  at  www.networkworld.com/seminars/securit/  ; 
or  call  800-643-4668  and  have  the  chance  to  win  a  $100  American  Express  Gift  Certificate  I 
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Performance  of  IDS  products  tested 


Cisco 

Computer 

Associates 

Enterasys 

lntrusion.com 

ISS 

No  load:  Attacks  detected  out 
of  27  delivered  (%  success) 

21  (78%) 

24  (89%) 

24  (89%) 

25  (93%) 

24  (89%) 

Stress  tests 

40M  bit/sec  load  * 

19  of  21  (90%) 

23  of  24  (96%) 

24  of  24  (100%) 

20  of  25  (80%) 

22  of  24  (92%) 

60M  bit/sec  load  * 

19  of  21  (90%) 

22  of  24  (92%) 

24  of  24  (100%) 

16  of  25  (64%) 

22  of  24  (92%) 

90M  bit/sec  load* 

19  of  21  (90%) 

19  of  24  (79%) 

21  of  24  (88%) 

4  of  25  (16%) 

17  of  24  (71%) 

Stress  tests  if  27  used 

40  M  bit/sec 

19  of  27  (70%) 

23  of  27  (85%) 

24  of  27  (89%) 

20  of  27  (74%) 

22  of  27  (81%) 

60M  bit/sec 

19  of  27  (70%) 

22  of  27  (81%) 

24  of  27  (89%) 

16  of  27  (59%) 

22  of  27  (81%) 

90M  bit/sec 

19  of  27  (70%) 

19  of  27  (70%) 

21  of  27  (78%) 

4  of  27  (15%) 

17  of  27  (63%) 

*  If  an  attack  was  not  detected  in  the  no  load  test,  it  was  eliminated  in  the  stress  tests. 
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and  configure  than  in  our  previous  tests. 
Overall,  the  appliances  were  easier  to  in¬ 
stall  than  the  software-based  products  be¬ 
cause  the  software-based  products  also  re 
quire  “hardening”  of  the  platforms  operat¬ 
ing  systems,  which  turns  off  unnecessary 
servers  (such  as  telnet  or  FTP)  that  could 
affect  security  or  performance. 

Intrusion.coms  RealSecure  appliance 
was  the  easiest  to  install.  Within  15  min¬ 
utes,  we  were  up  and  running  with  mini¬ 
mal  tweaks.The  Cisco  Secure  IDS,  an  appl¬ 
iance,  was  also  easy  to  install,  but  because 
the  product  supports  so  many  advanced 
settings  and  configurations,  it  was  easy  to 
get  lost  trying  to  find  things.  Also,  Cisco 
doesn’t  always  make  good  use  of  screen 
space.  For  example,  on  Secure  Fblicy  Man¬ 
agers  General  Signatures  screen,  there’s  a 
small  window  for  scrolling  through  signa¬ 
tures  that  the  user  can’t  expand,  although 
there  was  lots  of  available  and  unused 
gray  space  around  the  window 

Installing  CAs  eTrust  was  intuitive  and 
logical,  but,  as  noted,  it  had  too  many  sepa¬ 
rate  applications,  which  limited  its  ease  of 
use.  CA  says  it  is  addressing  this  issue  for 
future  releases. 

Enterasys’  initial  screen  gives  the  user 
five  options,  such  as  policy  configurations 
and  real-time  monitoring,  but  once  you 
drill  down  into  any  one  area,  it’s  not  easy 
to  get  back  out  to  another.  And  because 
we  were  working  with  a  Web  browser,  we 


had  to  repeatedly  hit  the  “back”  key  to 
return  to  the  main  home  page  and  then 
go  forward  to  another. While  it  was  possi¬ 
ble  to  open  multiple  windows  and  switch 
between  them,  we  found  that  cumber¬ 
some.  Unix  users  will  find  that  setting  up 
the  IDS  Dragon  Sensor  through  the  Unix- 
based  command-line  interface  fairly 
straightforward, although  Windows  users 
might  get  frustrated. 

ISS’s  RealSecure  software  installation 
took  the  longest,  but  still  took  less  than  30 
minutes  (minus  hardening  the  server). 
RealSecure  had  the  most  logical  and  intu¬ 
itive  graphical  user  interface  —  almost 
everything  we  needed  to  see  to  install  the 
system  was  visible  on  one  screen  so  it  was 
possible  to  manage  devices  and  events 
without  navigating  through  different 
screens.  However,  we  found  the  Real- 


Secure ’s  “wizards”  the  least  intuitive  fea¬ 
ture.  Instead  of  stepping  us  through  a 
process  from  beginning  to  end,  the  wizard 
presented  a  list  of  options  for  further  selec¬ 
tion. The  wizards  would  have  been  more 
helpful  if  they  were  more  focused. 

■  Features 

All  the  products  supported  a  full  com¬ 
plement  of  IDS  features.  With  few  excep¬ 
tions,  the  products  supported  nearly  all 
the  specific  features  we  looked  for  during 
our  analysis. 

Cisco  Secure  ID  supported  the  largest 
database  of  known  attack  signatures,  while 
Intrusion. corn’s  was  the  smallest  (which 
didn’t  prevent  the  SecureNet  from  recog¬ 
nizing  the  highest  number  of  attacks  in 
our  random  attack  tests).  Enterasys  sup¬ 
ported  the  most  granular  attack  database, 


providing  more  details  about  attacks  than 
the  other  products.  However,  some  end 
users  just  want  to  know  they’ve  been  at¬ 
tacked,  so  it’s  up  to  the  individual  to  de¬ 
cide  how  much  detail  is  a  good  thing. 

Intrusion.coms  SecureNet  was  the  only 
product  that  did  not  support  automatic 
update  of  attack  signatures.  It  requires  a 
manual  download  and  installation  of  sig¬ 
natures,  which  forces  the  administrator  to 
update  each  remote  sensor  individually  — 
a  tedious  process  and  the  main  reason 
SecureNet  scored  a  3  out  of  5  for  features. 

All  the  products  supported  a  detailed  ex¬ 
planation  of  attacks,  including  the  Com¬ 
mon  Vulnerability  and  Exposures  database 
of  known  vulnerabilities,  and  Bugtraq  IDs, 
a  Web  site  on  which  most  security  profes¬ 
sionals  release  an  exploit  once  it  is  discov- 
See  Review,  page  62 


Features  overview 


Cisco 

Computer  Associates 

Enterasys 

lntrusion.com 

ISS 

Products  tested 

Cisco  Secure  IDS  Version 
2.21  (sensor);  Cisco  Secure 
Policy  ManagerVersion  2.3i 
(console) 

eTrust  Intrusion  Detection 
Engine  Version  1.5  (sensor); 
eTrust  Intrusion  Detection 
Management  Version  1.5 
(console) 

IDS  Dragon  Sensor 
Appliance  Version  5.0 
(sensor);  IDS  Dragon 

Server  Appliance  Version 

5.0;  Dragon  Policy  Manager 
Version  5.0  (console) 

SecureNet  PDS  5545 
Security  Appliance  (sensor); 
SecureNet  Pro  Version  4.0 
(X-windows  management 
console);  SecureNet 
ProviderVersion  1.0 
(Windows  2000  management 
console) 

RealSecure  Network 
SensorVersion  6.0  (sensor 
software);  RealSecure 
ManagerVersion  6.0 
(management  console) 

Sensor  platform 

Stand-alone  appliance 

Win  98/NT/2000 

Stand-alone  appliance  or 
software  on  Unix-based 
system 

Stand-alone  appliance  or 
software  on  Red  Hat  Linux 
6.2-based  system 

Win2000/NT  or  Solaris  2.6 
to  2.8 

Management  platform 
(console) 

Windows  NT  for  Secure 
Policy  Manager;  Windows 
98/NT /2000  for  client 
console;  an  alternative  to 
Secure  Policy  Manager, 
Cisco  Secure  Director 
(not  tested)  runs  on  HP 
OpenView 

Win  98/NT/2000 

Any  Web  browser  to 

Dragon  Policy  Manager, 
which  runs  on  Dragon 
Server  Appliance 

Win  2000  for  SecureNet 
Provider;  an  alternative, 
SecureNet  Pro,  runs  on  a 
Linux-based  platform 

Win2000/NT 

Management  interface 

Command-line  interface, 
GUI 

GUI 

Command-line  interface, 
Web  browser 

Command-line  interface, 
GUI,  Web  browser 

Command-line  interface, 
GUI 

Special  tools  for 
integration  with  third- 
party  firewalls,  routers 
or  VPN  controllers 

Cisco  IOS  routers,  Catalyst 
5000/6000,  PIX  firewall,  RSM 
(router  security  module,  and 
IDS  blade  for  the  Catalyst 
6500) 

Cisco  routers,  Check  Point 
Software  firewalls,  eTrust 
firewall 

None 

None 

Check  Point  Firewall-1, 
Lucent  Brick  Firewall 

Encrypted  remote 
management  support 

IP  Security 

Blowfish 

Blowfish 

Secure  Sockets  Layer  or 
Secure  Shell 

RSA,  Certicom  or  others 

Automatic  update  of 
attack  signatures? 

Yes 

Yes 

Yes 

No 

Yes 

Projector 


Flatscreen  monitor 


Portable  PC 


TV  monitor 


Everybody  needs  something.  And  the  odds  are  you  can  find  a  good  deal  on  that  something  at  eBay. 
With  millions  of  items  listed  every  week,  we’ve  got  just  about  every  presentation  tool  you  could  want,  new  or  used. 
So  before  you  go  spending  weeks  searching  for  a  bargain,  you  might  want  to  check  us  out  first.  Go  to  ebay.com 


or  AOL  keyword:  ebay  and  register  where  you  see  this: 


welcome  new  men 
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ered  (www.securityfocus.com). 

All  the  products  also  supported  a  stealth¬ 


mode  monitoring  interface,  which  lets  a 
network  interface  card  (NIC)  see  all  the 
traffic  so  the  IDS  can  analyze  it.  NICs  typi¬ 
cally  look  at  media  access  control  ad¬ 
dresses  and  listen  only  to  traffic  that  is 
directed  to  it;  software  on  the  IDS  puts  the 
NIC  into  stealth  (or  “promiscuous”)  mode 
so  that  it  can  see  everything. 

Vendors  have  based  their  features  devel¬ 
opment  on  addressing  previously  known 


vulnerabilities, such  as  Unicode  detection 
and  TCP  reset  prevention  mechanisms, 
into  their  products.  Unicode  is  a  uniform 
coding  scheme  that  allows  communica¬ 
tion  between  diverse  texts  (the  current 
version  is  Unicode  3. 1.1;  see  www.uni 
code.org  for  specifics).  Previously,  IDSes 
could  not  read  Unicode,  and  attackers 
took  advantage  of  that  vulnerability  A  TCP 
reset  lets  the  IDS  send  out  a  spoof  packet 


PowerQuest  PowerManage  Suite™  provides  IT  professionals  with  a  data 
availability  solution  for  enterprise-wide  Windows®  2000  and  NT®  Servers.  This 
suite  is  a  comprehensive  set  of  products  that  allows  you  to  prevent  storage 
problems  before  they  occur,  minimize  system  downtime  in  the  event  of  a 
problem,  and  reduce  the  overall  cost  of  network  storage  administration. 


PowerQuest  PowerManage  Suite 


includes; 


PowerQuest  PowerExpert  ST™ 

•  Monitor,  manage  and  enforce  disk  storage  limits  in  real  time  to  maximize 
disk  space 

•  Generate  standard  and  customizable  reports  on  all  major  storage  criteria 

•  Capacity  plan  by  recording  storage  usage  over  time  to  estimate  future 
storage  requirements 


PowerQuest  VolumeManager™ 

•  Easily  resize,  reconfigure,  check,  format,  delete  and  copy  volume  sets 

•  Reconfigure  and  add  drives  to  your  RAID  storage 

•  Securely  shred  partitions  to  protect  your  valuable  data 


PowerQuest  StorageMonitor™  (included  in  VolumeManager) 

•  View  volume/partition  and  server  information  domain-wide  via  a  web  browser 

•  Receive  automatic  threshold  notification  via  e-mail  or  pager 


Combine  these  products  with  PowerQuest’s  consulting,  training  and  education, 
and  premium  support,  and  it’s  no  wonder  that  77%  of  Fortune  500  companies 
and  over  4  million  satisfied  customers  rely  on  PowerQuest  solutions. 


To  find  out  more  about  PowerQuest  Storage  Management  Solutions, 
or  to  receive  a  FREE  demo  of  PowerQuest’s  PowerManage  Suite,  call  us 
today  at  1-800-379-2566,  or  simply  visit  us  at 
www.powerquest.com/powermanage/nww 


02001  PoMffrOuMl  Corporation.  AM  rights  raaarvad  AM  brand  and  product  namas 
ara  tradamarfcs  or  ragwtarad  trademarks  of  than  respective  owners.  The 
PowerQuest  products  may  be  protected  under  U  S  and  Inaarnabonal  patent  law  or 
pandmg  patents 


Proven  Solutions  for  Storage  Management 


Many  Companies  predict 
Storage  problems,  but 


how  many  can 


solve 


them  before  they  occur? 


that  terminates  a  TCP  connection  instead 
of  telling  a  firewall  to  stop  all  packets. 

All  the  IDSes  also  now  support  shun¬ 
ning,  or  prevention,  of  attacks,  but  it  is 
turned  off  by  default,  and  it’s  up  to  the 
user  whether  to  use  it. 

■  Configuration 

The  Cisco  Secure  IDS  was  the  bulkiest  of 
the  appliances  (it  is  a  4-U  appliance;  the 
others  were  1-U  appliances),  and  it  report¬ 
ed  power  status  and  disk  activity  but  had 
no  link-level  LEDs.  It  was  the  only  product 
that  was  not  offered  as  a  stand-alone  soft¬ 
ware  product  (as  well  as  a  stand-alone 
hardware/software  appliance). 

CA’s  eTrust,  one  of  the  two  software- 
based  products  tested,  had  low  minimum- 
system  requirements,  which  might  not  sup¬ 
port  enough  horsepower  for  high-speed- 
link  monitoring.  CA  was  the  only  vendor 
that  did  not  offer  an  appliance-based  IDS 
product  —  software  only 

Enterasys  offers  appliance  and  software- 
versions  of  IDS  products.  We  tested  the  ap¬ 
pliance  version,  which  supports  LEDs  that 
were  small,  recessed,  not  clearly  labeled 
and  hard  to  read. The  IDS  Dragon  is  well 
architected,  though,  incorporating  a  multi¬ 
tiered  architecture  for  improved  scalability. 
However,  the  event  collector  runs  on  the 
management  console  rather  than  on  a 
separate  platform,  which  would  better 
conserve  management  resources. 

lntrusion.com  had  the  most  well-de¬ 
signed  appliance,  with  LEDs  that  were 
especially  useful  and  easy  to  read, al¬ 
though  there  was  no  power  button  on  the 
front  of  the  device,  which  would  have 
been  a  plus. 

The  ISS  RealSecure,  which  we  tested  in 
software,  has  the  advantage  in  scalability 
RealSecure  has  distinctly  different  event 
collectors,  and  management  is  run  on  a 
separate  machine,  leaving  it  free  to  use  all 
its  resources  for  management. 

■  Wrapping  it  up 

IDS  products  have  undergone  a  meta¬ 
morphosis  during  the  past  year,  blossom¬ 
ing  into  sophisticated  machines  that  are 
easier  to  install,  and  incorporate  better 
management  and  performance.  But  they 
could  still  use  improvements  in  event  cor¬ 
relation  and  management, and  their  ability 
to  support  speeds  beyond  100M  bit/sec. 

Yocom  is  senior  editor,  Brown  is  lab  test 
engineer  and  Van  Derveer  is  lab  technician 
at  Miercom,  a  network  test  lab  and  consul¬ 
tancy  in  Princeton  Junction,  N.J.  They  can 
be  reached  at  byocom@mier.com,  kbrown 
@mier.com  and  dvanderveer@mier.com. 


Global  Test  Alliance 


■  Miercom  is  a  member  of  the  Network 
World  Global  Test  Alliance,  a  cooperative  of 
the  premier  reviewers  in  the  network 
industry,  each  bringing  to  bear  years  of 
practical  experience  on  every  review.  For 
more  Test  Alliance  information,  including 
what  it  takes  to  become  a  member,  go  to 
www.nwfusion.com/alliance. 
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NetScout's  nGenius 


NetScout  Systems  nGenius  suite  combines  network  monitoring,  application  service-level  manage¬ 
ment  and  capacity  planning  in  one  neat,  if  slow  and  pricey,  package. 


Does  it 
take  an 
nGenius 
to  fix  your 
network? 


■  BY  BARRY  NANCE,  NETWORK  WORLD  GLOBAL  TEST  ALLIANCE 


Administering  a  large  network  can  sometimes  make  you  think  you’re  in 
a  rut  —  Step  1.  Monitor  the  network  for  connectivity  and  utilization. 
Step  2.  Fix  a  problem.  Step  3.  Plan  for  next  weeks,  next  month’s  and 
next  years  network.  Step  4.  Repeat  from  Step  1  — You’re  caught  in  an 
infinite  loop. 

NetScout  Systems  claims  its  three-piece  suite  of  nGenius  software  can  help  you  out 
of  that  rut  by  automating  many  of  your  repetitious  network  administration  tasks. The 
suite,  which  NetScout  obtained  when  it  acquired  NextPoint  Networks  last  year,  con¬ 
tains  Real  Time  Monitor  Plus  1.2,  Application  Service  Level  Manager  3.0  and  Capacity 
Planner  3.0. To  the  NextPoint  software,  NetScout  added  a  number  of  enhancements 
and  additions,  including  its  WebCast  technology  for  rendering  reports  using  a  Web- 
based  newspaper  publishing  metaphor. 


We  tested  NetScout’s  suite  of  network  tools  in  our  Connecticut  lab.  Our  tests 
revealed  the  nGenius  software’s  network  monitoring  to  be  accurate  and  compre¬ 
hensive,  the  reports  thoughtfully  designed  and  the  documentation  especially  clear 
and  comprehensive.  However,  we  found  the  Java-based  nGenius  software  slow  and 
cumbersome.  We  would  have  liked  a  greater  degree  of  integration  among  the 
nGenius  components, and  we  feel  the  $150,000  price  tag  for  the  three  components 
makes  the  software  far  too  expensive. 

Genius  at  work 

Real  Time  Monitor  Plus  impressed  us  with  its  accurate  monitoring,  analyzing  and 
reporting  of  network  traffic.  In  particular,  its  troubleshooting  features  helped  us  isolate 
the  causes  of  the  network  problems  we  gave  it  to  handle.  Real  Time  Monitor  Plus  con¬ 
sists  of  nGenius  Server,  Traffic  Monitor,  Performance  Monitor  and  Packet  Analyzer. 


Net  Results 


NGenius  suite  (Real  Time  Monitor  Plus  1.2,  Application  Service  Level 
Manager  3.0  and  Capacity  Planner  3.0) 

Company:  NetScout  Systems,  (800)  357-7666,  www.netscout.com 
Price:  $50,000  per  module  per  server.  Pros:  Customizable,  useful 
reports;  excellent  capacity  planning  features.  Cons:  Sometimes 
sluggish  and  cumbersome;  expensive. 
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Traffic  Monitor,  part  of  the  Real  Time  Monitor  Plus  module,  graphs  various  categories  of 
activity  at  the  data  link,  network  and  application  layers. 


What's  the  score? 

nGenius  suite 

Monitoring  20% 

4 

Notification  20% 

4 

Reports  20% 

4 

Management  20% 

2 

Documentation  10% 

4 

installation  10% 

2 

TOTAL  SCORE 

3.4 

Individual  category  scores  are  based  on  a  scale  of  1  to  5.  Percentages  are  the  weight  given 
each  category  in  determining  the  total  score.  B  Scoring  Key:  5:  Exceptional  showing  in  this 
category.  Defines  the  standard  of  excellence.  4:  Very  good  showing.  Although  there  may  be  room 
for  improvement,  this  product  was  much  better  than  the  average.  3:  Average  showing  in  this 
category.  Product  was  neither  especially  good  nor  exceptionally  bad.  2:  Below  average.  Lacked 
some  features  or  showed  lower  performance  than  other  products  or  than  expected.  1:  Consistently 
subpar  or  lacking  features  being  reviewed. 


NGenius  Server  sorts,  stores  and  analyzes  packets  from  NetScout  probes,  routers  and 
switches,  and  it  has  a  user  interface  for  managing  network  devices  and  identifying 
people  authorized  to  access  nGenius.Traffic  Monitor  displays  real-time  network  activ¬ 
ity  at  configurable  intervals  (from  15  seconds  to  15  minutes),  while  Performance  Mon 
itor  and  Packet  Analyzer  examine  network  activity  to  pinpoint  bandwidth  bottlenecks 
and  categorize  the  kinds  of  traffic  causing  network  problems. 

Application  Service  Level  Manager  ferrets  out  application  traffic  jams  by  studying 
an  application’s  Open  Database  Connectivity  packets,  TCP  socket  usage  or  HTML 
emissions.  Once  we  defined  our  test  application’s  minimum  service  levels  in  these 
terms,  Application  Service  Level  Manager  alerted  us  to  service-level  exceptions  by 
paging  us,  sending  e-mail  and  transmitting  SNMP  traps.  It  works  with  software  that 
incorporates  the  Application  Response  Measurement  API,  and  Application  Service 
Level  Manager  also  offers  its  own  API  for  simulating  the  effect  of  an  application  on 
the  network.  When  we  used  this  API  to  create  synthetic  transactions  and  then  mon¬ 
itored  them  with  Application  Service  Level  Manager,  we  could  easily  see  where 
application  performance  degraded  on  the  network  and  why 

We  used  Capacity  Planner  to  discover  our  network’s  devices,  collect  network  uti¬ 
lization  data  from  those  devices  and  report  the  result,  it  gave  us  useful  browser-based 
reports  showing  historical  data,  baseline  data  and  trends  in  an  easy-to-understand 
newspaper-like  format.We  found  customizing  the  various  Capacity  Planner  reports  via 
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the  NewsEditor  module  to  be  straightfor¬ 
ward. Similarly, setting  up  threshold  filters  to 
define  exceptions  we  wanted  nGenius  to 
watch  for  was  unremarkable.The  Web  page 
interface  has  a  setup  menu  for  discovering 
network  devices, grouping  those  devices  in 
logical  ways,  starting  data  collection  and 
creating  newspaper  reports.  It  also  has  a 


channel  menu  for  selecting  newspaper  re¬ 
ports,  viewing  exceptions  and  drawing  net¬ 
work  maps.  Because  it  accurately  and 
graphically  showed  network  traffic  trends 
by  application,  we  especially  liked  using 
the  Capacity  Planners  Predictive  Analyst 
module  to  forecast  our  networks  growth. 

The  Java  and  database  run-time  environ¬ 


ment  NetScout  ships  with  the  nGenius  suite 
consists  of  JRun  3.01,  from  Allaire  Corp. 
(now  part  of  Macromedia),  and  an  Oracle 
database,  Version  8.O.4.4.  JRun  is  a  Java  2 
Enterprise  Edition  (J2EE)  application 
server.  nGenius  runs  on  Windows  NT,  Win¬ 
dows  2000  and  Solaris,  and  its  three-tier 
architecture  makes  it  possible  to  distribute 


Need  IT? 


More  online! 

•  Information  about  how  we  tested  nGenius. 

•  Other  recent  network  management  related  articles: 
"Managing  the  Windows  mixed-mode  monster." 

•  Windows  watchers:  Keeping  tabs  on  midsize 

Windows  networks. 

•  Network  monitoring  tools:  Some  handy  information 

on  the  products  we  have  reviewed. 

DocFinder  6224 


Find  IT. 

BUY  IT! 


NWFusion's  Buy  IT  site  is  a  fast  and  efficient 
way  to  outsource  IT  projects, 


Simply  log-on  to  NWFusion's  Buy  IT  and 
access  complete,  up-to-date  information 
on  top-notch  IT  vendors.  Search  our 
comprehensive  directory  by  location  or 
category  and  review  vendors  online.  You  can  post  all  your  IT  needs  for 
free,  receive  competitive  bids  from  qualified  vendors  and  choose  the 
one  that's  right  for  you.  Whether  you're  looking  for  consultants,  ASPs, 
or  contract  employees,  NWFusion  makes  buying  IT  fast  and  easy! 


BUY  IT 


IT  Vendor  Directory  &  RFP  Center 


Try  it  today  -  it's  fast  and  FREE! 

http://nwfusion.newmediary.com 


Find  the  best  vendors 
specializing  in: 


Hardware  &  Peripherals 
Internetworking 
LANs/WANs/MAN 
Networking  Services 
Business  Services 


nGenius  components  across  multiple  com¬ 
puters.  Unfortunately,  even  when  spread 
across  different  computers,  the  nGenius 
server, Traffic  Monitor  and  Capacity  Planner 
components  weren’t  as  responsive  in  our 
tests  as  we  would  have  liked. 

Installing  the  nGenius  components  takes 
several  steps,  with  server  reboots  between 
steps.  The  tedious  installation  is  further 
complicated  by  the  software’s  exacting 
platform  requirements.  Windows  NT,  for 
instance,  must  be  Version  4.0  with  Service 
Pack  6a,  have  Internet  Explorer  5.0  with 
Java  Virtual  Machine  5.0.0.3190  and  run 
on  at  least  a  dual-processor  750-MHz  Intel 
computer  with  1G  byte  of  memory  1,024- 
by-768-pixel  color  monitor  set  for  32,768 
colors  and  26G  bytes  of  disk  storage. 

If  the  nGenius  server  should  suffer  a 
hardware  failure,  moving  nGenius  to  a 
different  server  will  prove  difficult  after- 
hours  or  on  a  weekend  because  nGenius’ 
license  key  is  based  on  the  server’s  IP 
address,  but  NetScout  help  desk  keeps 
bankers’  hours. 

NetScout  supplies  several  printed  manu¬ 
als  with  the  nGenius  suite.The  manuals  and 
the  online  help  files  are  well-written,  clear 
and  comprehensive. 

NGenius  excels  at  monitoring,  analyzing 
and  reporting  on  network  utilization  in  an 
enterprise  setting.  Still,  we’ll  hold  off  on  rec¬ 
ommending  nGenius  until  it  gets  a  bit 
faster  and  carries  a  smaller  price  tag. 

Nance,  a  software  developer  and  consul¬ 
tant  for  29  years,  is  the  author  of  Intro¬ 
duction  to  Networking,  4th  Edition,  and 
Client/Server  LAN  Programming.  You  can 
contact  him  at  barryn@erols.com. 


Global  Test  Alliance 


■  Nance  is  also  a  member  of  the  Network 
World  Global  Test  Alliance,  a  cooperative  of 
the  premier  reviewers  in  the  network 
industry,  each  bringing  to  bear  years  of 
practical  experience  on  every  review.  For 
more  Test  Alliance  information,  including 
what  it  takes  to  become  a  member,  go  to 
www.nwfusion.com/alliance. 
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■  CAREER  DEVELOPMENT 

■  PROJECT  MANAGEMENT 

■  BUSINESS  JUSTIFICATION 


Resume  writing 

With  the  tight  job  market,  a  good  resume  can  give  you  an  edge  over  the  next  candidate. 


■  BY  DREW  ROBB 

Given  the  increasingly  competitive  state  of  the  IT  job  market,  it 
can  be  tempting  to  inflate  your  resume.  After  all,  you  wouldn’t  be 
alone  in  telling  fibs  or  outright  whoppers.  One  in  seven  job  appli¬ 
cants  make  false  claims  about  their  education,  according  to  the 
Brookfield,  Wis.,  recruitment  firm  Jude  M.  Werra  and  Associates, 
publisher  of  the  semiannual  Liars  Index. 

A  better  way  to  stand  out  is  to  create  an 
outstanding  resume  that  effectively  commu¬ 
nicates  your  value  and  talents  to  prospective 
employers.  But  like  everything  else,  resume 
writing  is  a  skilled  activity. 

Take  the  case  of  a  network  engineer  in 
Silicon  Valley  who  had  been  out  of  work  for 
five  months.  Despite  sending  his  resume  to 
a  multitude  of  recruiters  and  personnel 
departments,  he  had  only  gotten  a  few  inter¬ 
views.  He  sought  professional  help  from 
resume  specialist  High  Tech  Resumes  in 
Mountain  View,  Calif. 

The  engineer  picked  out  a  few  positions 
of  interest,  and  the  firm  tailored  his  resume 
to  each  job,  focusing  on  how  his  skills  and 
experience  matched  those  positions.“Forty- 
five  days  later,  he  was  back  at  work,”  says 
Michael  Goldstein,  director  of  High  Tech 
Resumes. 

For  help  writing  resumes  that  sell,  here  are  a 
few  IT-specific  tips  gleaned  from  the  experts. 

Decide  how  much  to  emphasize. 

If  you’re  applying  for  a  managerial  posi¬ 
tion,  give  your  full  job  history.  Although  the 
technology  you’ve  worked  with  has 
changed  over  the  years,  employers  are 
looking  for  a  sequence  of  career  develop¬ 
ment  and  increasing  responsibility. 

However,  if  you’re  seeking  a  more  hands- 
on  technical  position,  just  focus  on  the  last 
five  to  10  years. 

List  both  lower  and  higher  levels  of  training. 

Let’s  say,  for  example  that  you’re  a  Cisco  Certified  Internetwork  Expert  (CCIE).To 
earn  a  CClE,you  also  need  to  be  a  Cisco  Certified  Network  Professional  (CCNP).List 
both  certifications.  Why?  Many  companies  scan  resumes  into  a  database  where  they 
can  be  keyword  searched.  When  someone  searches  for  a  CCNP  to  hire,  the  search 
engine  won’t  know  that  a  CC1E  is  even  better.  And  more  often  than  not,  a  human 
resources  representative  won’t  know  this  either  when  scanning  through  a  drawer  full 
of  resumes. 

Get  personal. 

The  personal  touch  is  vital  in  managerial  positions.The  higher  the  level  of  the  position 


you’re  seeking,  the  more  important  it  is  to  point  out  how  you  have  a  combination  of  peo¬ 
ple  and  technical  skills,  says  Tom  Morris  of  the  Washington,  D.C.,  outplacement  firm 
Morris  Associates. 

Showcase  technical  proficiency  and  the  ability  to  work  with  the  CFO  to  improve  the 
bottom  line,  or  the  sales  director  to  improve  customer  retention.  It  can  also  help  to  list 
industry  and  community  activities  because  this  demonstrates  leadership  and  profes¬ 
sional  networking  abilities. 

Don’t  confuse  the  recruiter. 

The  purpose  of  a  resume  isn’t  to  obtain  a  job,  but  to  get  an  interview.“Some  people  who 
have  been  around  a  long  time  will  speak  in  tech  jargon  off  the  top  to  show  what  they 

know,”  says  Mike  Mullery,  a  Fortune  Personnel 
Consultants  recruiter  in  San  Ramon,  Calif. 

While  the  IT  executive  who  conducts  the  interview 
will  understand  what  you’re  talking  about,  HR 
makes  the  first  pass  at  scrutinizing  resumes  and 
decides  which  applicants  to  call  for  an  interview. 
Instead  of  “designed  and  installed  an  OC-192 
SONET  MAN,”  say  “oversaw  rollout  of  a 
high-speed  network  joining  30,000 
employees  in  100  buildings.”  This  will 
improve  your  chances  of  making  it  into 
an  interview  with  someone  who  knows 
what  you  are  talking  about. 

Don’t  shortchange  project  experience. 

If  you’ve  been  working  as  a  consultant 
and  a  company  keeps  calling  you  back 
for  more,  don’t  group  all  your  work 
together  as  “Consultant  for  Acme 
Company  —  18  months.”  List  the  pro¬ 
jects  so  it’s  clear  that  the  company  loved 
your  work  and  kept  rehiring  you,  rather 
than  letting  it  look  like  one  long  project. 

Tie  together  your  training  and  your 
experience. 

Say  you  note  that  you  were  a  network 
administrator  in  the  job  experience  sec¬ 
tion  of  your  resume,  and  the  education 
and  training  section  cites  your  Micro¬ 
soft  Certified  Systems  Engineer  (MCSE) 
training.  But  unless  you  say  so,  the  reader 
can’t  tel!  if  you  were  administering  a 
Windows,  NetWare  or  Unix  network. 

Instead,  put  something  like  this  in  the  job  experience  section:  “I  used  my  MCSE 
training  to  migrate  the  network  from  Windows  NT  to  Windows  2000,  including  a  full- 
scale  Active  Directory  rollout.”  By  tying  together  training  and  experience, you  create 
a  more  dynamic  and  interesting  document. 

If  your  resume  still  isn’t  working,  hire  a  professional. 

You  make  your  living  overseeing  networks. Similarly,  there  are  people  who  make  their 
living  crafting  resumes.Yes,  High  Tech  Resumes’ Goldstein  charges  $175  to  prepare  your 
resume,  but  compare  that  to  spending  a  few  months  out  of  work.  If  your  resume  isn’t 
landing  you  interviews,  seek  professional  assistance. 

Robb  is  a  freelance  writer  in  Los  Angeles  specializing  in  technology  issues. 
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BlueCat  Networks  name,  design  and  related  marks  are  trademarks  of  BlueCat  Networks. 
€  2001  All  Rights  Reserved.  Java^?  Is  a  trademark  of  Sun  Microsystems,  Inc. 
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AutoView  and  OutLook 


Liooking  for  greater  access  to  more  servers? 
Need  the  flexibility  to  handle  multiple  platforms 
or  users?  Step  up  to  Avocent  KVM  switches. 

Our  AutoView  series  controls  up  to  24  multi¬ 
platform  servers  as  far  as  500  feet  away. 
Choose  an  Avocent  OutLook  switch  for  true 
mult-user  access  to  your  rack-mounted  servers. 
Both  switches  are  expandable,  designed  to  keep 
pace  with  your  growing  data  center. 

Find  out  what  the  world’s  leading  technology 
companies  and  server  manufacturers  already 
know,  and  take  your  switching  to  a  higher  level. 


ADVANCED  KVM  SWITCHES 

1 

Users 

Ports 

Platforms 

Key  Features 

AutoView  200 

1  local,  1  extended 

4,8 

PC 

All  models  are 

AutoView  400 

1  local,  1  extended 

8,16,24 

PC,  USB,  Sun 

rack  mountable, 
flash  upgradeable 

OutLook  2160ES 

2 

16 

PC 

and  expandable 
with  built-in  on 

OutLook  41 60ES 

4 

16 

PC 

screen  display. 

Go  to  www.avocent.com  or  call 
1-866- AVOCENT  (286-2368) 
and  get  your  free  KVM  buyers 
guide  today 


Avocent. 

The  Power  of  Being  There.- 


Avocent,  the  Avocent  logo  and  The  Power  of  Being  There’  are  trademarks  of  Avocent  Corporation.  Cybex  and  AutoView  are  registered  trademarks  of  Cybex  Computer  Products  Corporation. 
Apex  and  OutLook  are  registered  trademarks  of  Apex  Inc.  All  other  marks  are  the  property  of  their  respective  owners.  C  2001  Avocent  Corporation. 


J 


High  Performance  LAN/WAN  Troubleshooting 
&  Protocol  Analysis  Software  Solutions 


'Jhsen>er-  Removes  the  Mystery  of  What  is 
Being  Sent  or  Received  by  LAN  Stations 

Observer  identifies  network  trouble  spots  and  costs 
thousands  less  than  expensive  hardware-based 
analyzers.  If  you  have  any  network  problems,  find 
out  the  cause  with  Observer,  Expert  Observer  or 
Observer  Suite. 

•  Full  packet  capture  and  decode  for  over 
1000  protocols,  including  TCP/IP  (v4  and  v6), 
NetBIOS/NetBEUI,  IPX/SPX,  Appletalk, 

SNA  and  DECnet 

•  Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  an  entire  switch  or 
packet  capture  from  any  port(s) 

•  Long-term  network  trending  collects  statistical 
data  for  days,  weeks,  months,  even  years 

•  Optimized  ErrorTrack  NDIS  drivers  display 
true  errors-by-stations 

•  Real-Time  Statistics  include  Top  Talkers, 
Bandwidth,  Protocol  Statistics, 

Efficiency  History 
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EXPERT  OBSERVER® 
OBSERVER®  OBSERVER®  SUITE 
$§S§  *1885  $2995 


•  Additional  probes  are  $295  per  local  or  remote 
segment/site/switch 

•  Ethernet  (10/100/1000),  Token  Ring,  FDDI 

Expert  Observer — Identifies  Problems  and 
Provides  Expert  Information  in  Plain  English 

Expert  Observer  includes  all  of  the  features  of 
Observer  plus  real-time  and  post-capture  expert 
event  identification,  expert  analysis,  VoIP  expert 
and  modeling  of  network  traffic  data. 

Observer  Suite — The  Ultimate  Tool  For  The 
Most  Demanding  Power  User 

Observer  Suite  provides  a  full  complement  of  tools 
that  includes  all  of  the  features  of  Expert  Observer 
plus  SNMP  management,  RM0N  console/Probe 
and  Web  reporting.  Includes  one  remote  Probe. 


©2000  Network  Instruments,  UC.  Observer, 
Network  Instruments  and  the  "N"  logo 
are  registered  trademarks  of  Network 
Instruments,  LLC 


Call  800-526-7919  or  visit  us  online  for  a  full-featured  evaluation: 

www.networkinstruments.com 

US  &  Canada  (952)  932-9899  •  Fax  (952)  932-9545  •  UK  &  Europe  +44  (0)  1959  569880  •  Fax  +44  (0)  1959  569881 


At  $995.00  with  an  unlimited 
user  license  GNAT  Box  Firewall 
isn’t  cheap.. .it’s  cost  effective. 

Features  Include: 

•  Proven  Firewall  Technology 

•  Dynamic  Network  Address  Translation 

•  Unlimited  User  License 

•  High  Performance 

•  Easy  to  Configure  and  Operate 

•  Remote  Web  Base  Management 

•  Time  Based  Access  Control 

•  Email,  Pager  &  SNMP  Trap  Alerts 

•  Email  Proxy  with  Anti-Spam  Features 

•  Win95/NT  Secure  Remote  Management 

•  URL  and  Content  Filtering 

•  Supports  Gigabit  Ethernet,  FDDI,  TokenRing 
10/100  Ethernet,  DSL,  Cable  Modem  &  PPP 

•  IPSec  VPN 

•  Built-in  DHCP  Server 

•  Built-in  DNS  Server 

•  ICSA  Certified 


Global  Technology  Associates,  Inc. 

Sales:  800-775-4GTA  •  Tel:  407-380-0220 
gb-info@gta.com  •  www.gnatbox.com 


CERTIFIED 


(  FliwtU  ) 


Now 

Available  in  the 
GB  Family  of 
Firewall 
Appliances 


Access  Your  Network  Equipment  From  Anywhere! 

When  it  comes  to  Remote  Site  Management,  no  one  offers  more  choices  to  remotely  access  multiple  console  ports  and/or  reboot  power  than 
Western  Telematic.  Our  Remote  Management  Hardware  offers  the  design  flexibility  you  need  to  mix  and  match  equipment  for  small  or  large  scale 
remote  management  strategies.  As  the  pioneer  and  leader  in  Remote  Site  Management,  WTI  products  are  now  installed  in  thousands  of  network 
sites  world  wide.  Our  customers  know  they  can  depend  on  our  superior  quality,  reliability,  and  delivery  for  their  mission-critical  operations. 


Telnet  and  Dial-Up  Console/AUX  Port  Switch 

Cost  Effective  Terminal  Server  Alternative 


10Base-T  Ethernet  Interface 


19”  Rack  Mounted 


AC  or  48V  DC  Power 


NEBS  Approved 


RS232  Ports 


Console  Management  Switch  (CMS) 


•  8  or  16  RS232  DB-9  Serial  Ports 

•  Simultaneous  Telnet  Sessions 

•  Modem  Auto-Setup  Command 
Strings  (User  Definable) 

•  IP  Security  Features 

•  Non-Connect  Port  Buffering 


CONSOLE  CONSOLE  CONSOLE  CONSOLE  CONSOLE 
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LOCAL  TERMINAL 


Telnet  and  Dial-Up  AC  Power  Switch 

Economical 


15  Amp  Power  Circuit 


lOBase-T  Ethernet  Interface 


Individually  Controllable 
Outlet  Plugs  (2)  Modem  Port  for 

Out-of-Band  Management 


Local  RS232  Console  Port 


Telnet  Power  Switch  (TPS) 

•  2  Individual  Outlets  •  Network  Security  Features 

•  On/Off/Reboot  Switching  •  Manual  On/Off  Buttons 

•  Outlet-Specific  Password  Security  •  Switches  1 5-Amp  Load 


Telnet  and  Dial-Up  Network  Power  Switch 

Reboot  Locked-up  Equipment 


Individually  Controlled 
Outlet  Plugs  (8) 


lOBase-T  Ethernet  Interface 


19”  Rack  Brackets 
Allow  Front,  Back, 
or  Center  Mounting 


Dual  15  Amp 
Power  Circuits 


Modem  Port  for 
Out-of-Band  Management 


Local  RS232  Console  Port 


Network  Power  Switch  (NPS) 


•  8  Individual  Outlets 

•  On/Off/Reboot  Switching 

•  Integral  lOBase-T  Interface 

•  Co-Location  Features 


Outlet-Specific  Password  Security 
Network  Security  Features 
115-VAC  (230-VAC  available) 
Power-Up  Sequencing 


Secure  Modem  for  Remote  Dial-Up  Management 

Dial-up  Access  to  Equipment  Bays 


Local  RS232  Console  Port 


NEBS  Approved 


AC  or  -48V  DC  Power 


33.6  Kbps  Modem 


Modem  Port 

Secure  Rack  Modem  (SRM) 

Up  to  100  Individual  Passwords 
Audit  Trail  Log  With  Time/Date  Stamp 
Powers  up  to  Specified  Answer  Rings  and  Baud  Rate 
Remotely  Configurable 

AC  and  -48V  DC  Power  Options  /( 

•  Standard  “AT”  33.6  Kbps  Modem  ' 1 
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Visit  Our  Website  For  The  Complete  NetReach ™  Product  Line 

www.wti.com 
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(800)  854-7226 


western  telematic  incorporated 

5  Sterling  •  Irvine  •  California  •  92618-2517 


Keeping  the  Net.. .Working! 


The  Hub  of  the  Network 


Buy 


Global  LAN  Workstations 
protect  your  equipment 
for  a  lot  less  money. 

Our  heavy-duty  LAN  Stations  are  built  to  last  with  steel-reinforced, 
triple-leg  support  and  lateral  braces.  Extra-wide  30”  work  surface, 
built-in  cable  management  system,  adjustable  shelves  and  sturdy 
server  shelf  allow  for  easy  integration  of  all  your  network  equipment. 
Our  96”,  72”,  48”  and  24”  wide  units  connect  easily  with  an  affordable 
joining  kit  for  unmatched  flexibility. 


Tilting  Monitor 
Shelves 

Tilted  Keyboard 
Holder 

Optional  Flat  Panel 
Monitor  Arm 

Optional  Side 
Panels 

Ergonomic 
Keyboard  Drawer 

CPU/Server  Rollout 

Caster  Base 


Networking  Specialists 

Our  Specialized  Networking  Team  is  ready  to  ^ 
customize  a  solution  for  you.  Call  for  a  free  catalog! 


72"  MODEL  SHOWN 


COMPUTER  SUPPLIES 

www.globalcom puter.com/lan/ 


r  network  costs  a  fortune 


protecting  it  doesn’t  have  to 


WebEvent  can  help  eliminate  the  hassles  of 
scheduling.  As  the  leader  in  Web-based  calendar 
solutions,  we  offer  the  most  time-tested  and  dynamic 
software  on  the  market.  All  at  a  price  that  leaves 
most  people  wondering,  "What's  the  catch?" 

The  catch  is  that  you  have  to  try  it  to  believe  it. 
Nearly  2,000  organizations,  including  Fortune  500 
companies  and  US  government  agencies,  use 
WebEvent  on  their  public  sites  and  private  intranets. 
Download  a  free  copy  and  see  for  yourself  why 
WebEvent  has  a  96%  customer  approval  rating. 

Special  Offer  to  NetworkWorld  Readers 

Get  an  extra  10%  off  of  our  already  low  prices. 

Enter  the  special  promotion  code  NWORLD  when 
you  purchase  online  at  our  site,  or  mention  this 
ad  to  a  sales  person  at  978.975.3344  x250. 

Try  it  free  for  15  days!  Download  a  copy  today 
from  www.WebEvent.com. 


|—  Use  WebEvent  for: 

•  Team  scheduling 

•  Event  publishing 

•  Resource  management 

—  WebEvent  software  gives  you: 

•  Full  source  code  access 

•  Customizability 

•  Scalability 

•  Cross-platform  compatibility 

•  Intuitive  user  interface 

•  Easy  implementation 

•  So  many  features  -  so  little  space! 
Check  out  our  product  demos  at 
www.  WebE  vent.com . 


Web  ?  Event 


Scheduling 


Made  Simple 


www.WebEvent.com 
978.975.3344  x250 


£ 
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FatPipe  it! 


WITH  MULTI-PATH  VPN 

Multi-Path  VPN  takes  any  VPN  &  makes  it  9  times  more  secure 
and  3  times  faster,  reliable  and  redundant 


FatPipe  Networks'  Multi-Path  VPN  (MPVPN) 
turns  any  VPN  into  a  Multi-Path  VPN 

No  BGP  programming  or  new  hardware  at  the  ISP 
Dynamic  bi-directional  load  balancing  of  traffic 
3  times  more  speed,  reliability,  and  redundancy 
Works  with  Ti,  T3,  Ei,  E3,  DSL,  and  Wireless 
Works  over  multiple  ISPs  and  backbones 
Reliability  for  hosting  web  servers 
Works  with  all  IPSEC  VPNs 
Host  multi-homed  servers 
9  times  more  secure 


ANY  VPN 
FILE  SERVERS 


CORPORATE  OFFICE 

FILE  SERVERS 

ANY  VPN 

FATPIPE  MPVPN 


Patented  and  Multiple  Patents  Pending 


FATPIPE  MPVPN 


n 


AfP r pe 

FatPipe  Networks 
www.fatpipeinc.com 
I  nfo(a)fa  tpipeinc.com 
Tel:8oo. 724. 8521 
Fax:  801.281.0317 


BRANCH  OFFICE 


Server  Management 
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FROM  Al'i  r/MSKE 


Rose  Electronics  KVM  switches 
or  multiple  workstations  to  have  local  or 
access  to  multiple  computers  located  in 
rooms  or  on  the  desktop. 

Rose  is  a  leading  KVM  switch  manufacturer 
with  the  most  complete  range  of 
management  products.  A  KVM  indus 
Rose  is  known  for  its  technically  superior 
price  competitive  products. 

From  simple  access  to  complex  configurations 
Rose  provides  easy  server  management 
solutions. 

Call  ROSE  today. 

Rose  Electronics 

10707  Stancliff  Rd.  Houston,  Texas  77099 


800-333-9343  281-933- 

USA  .  CANADA  .  ENGLAND  .  GERMANY  .  BENELUX  .  AUSTRALIA  .  SINGAPORE 


ELECTRONICS 


WWW.ROSE.COM 


Seeking  Solutions  . . .  NTI  Has  The  Answers 

BREAKTHROUGH 
CAT5  KVM 
EXTENDER 


“I  need  to  extend  control  & 
protect  my  computers  from 
hazardous  conditions.” 


Allows  one  keyboard, 
monitor  &  mouse  to  be 
placed  up  to  575  feet 
from  the  computer  or 
NTI  KVM  switch  using 
in-house  Cat5  phone 
wiring. 
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ST-C5-KVM  (Local  and  Remote  Unit) 

UNIVERSAL  CAT5 
*■  KVM  EXTENDER 


Available  in  both  KVM 
and  Video  Only  models. 

Compatible  with  PC, 
SUN  &  MAC  computers 
as  well  as  all  NTI  KVM 
switches. 

Crisp  &  clear 
1280x1024  resolution. 


BUY  ONLINE  at  www.nti1.com 


Email:  sales@nti1.com 


1275  Donner  Drive  •  Aurora,  OH  44202 
330-562-7070  •  FAX:  330-562-1999 


CATS  KVM  SOLUTIONS 


Reading  someone 
else's  copy  of 
Network  World? 


PLUS... 

•  Enterprise  level  product  testing 

•  Product  Buyers  Guides 

•  Management  surveys 

•  Signature  Series  Special  Issues 


Apply  for  your  FREE  Subscription  Today 

www.nwwsubscribe.com/pa 


Apply  for  your  own  FREE 
subscription  go  to 

www.nwwsubscribe.com/pa 

and  subscribe  today! 


Week  after  week  Network  World 
gives  you  late  breaking  news 
and  in-depth  insights  on 
infrastructure,  carriers  and  ISPs, 
enterprise  applications,  technology  updates, 
security,  building  resilient  networks,  video 
conferencing  and  management  strategies. 


Looking 

for  Solutions?** 


With 
Network  World's 


you  can  find  them. 

Ml 


LinkSmart,  located  on  V 
Network  World  Fusion,  V. 
allows  you  to  search  for  V. 
products  and  services  by  \ 
technology.  Vendor  listings  ' 
appear  with  a  product/service 
description  and  include  a 
link  to  each  vendor's  website. 
Solutions  in  one  convenient  site, 
www.nwfusion.com/linksmart 


Paragon" 

-dcetss  Ofer  IP 


2  Under  Par. 


Life  is  good..  ■  with  Paragon,  the  highly 

acclaimed,  multi-user,  multi-platform  KVM  switch 
that  uses  Raritan's  advanced  Cat5  transmission 
technology  for  access  to  hundreds,  even  thousands 
of  servers  up  to  1 ,000  feet  away.  What  could  be 
better?  Paragon  power,  over  IP. 

Paragon®  +  TeleReach™  Enterprise-class  KVM 
technology,  plus  the  fastest,  most  reliable  and  secure 
way  to  gain  remote  IP  access  to  multiple  servers  — 
no  matter  where  you  are,  or  where  your  servers  are 
located.  Manage  your  servers  from  anywhere  via  the 
Internet,  LAN/WAN  or  dial-up  modem.  Maintain, 
administer  and  troubleshoot,  even  down  to  BIOS-level. 
And  Raritan's  unique  Video  Compression  Algorithm 
and  industry-standard  1 28  bit  SSL  encryption  ensure 
speedy  and  secure  data  transfer,  even  over  modem 
or  slow  Internet  connection. 


HI1  Raritan. 


www.raritan.com 


Paragon  +  TeleReach  Winner  of  Network 
Computing's  prestigious  Editor's  Choice.  The 
complete,  hassle-free,  server  management  solution. 

Anywhere.  Anytime.  — . 

IjS*. 


800-724-8090 


Raritan  and  Paragon  are  registered 
trademarks  of  Raritan  Computer,  Inc 
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There  is  a  better  way 

to 
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your 
wireless  LAN! 


Colubris  Networks’  CN1000  Family  of  Wireless 
LAN  Routers  with  integrated  IPSec  &  L2TP. 


colubrisnetworks.com 

keyword:  wlan  security 


Colubris  Networks 


Securing  your  Wireless  Future 


| 
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Buy  Lease  Authorized  Reseller  Sell  Repair 
New  Refurbished  Used 
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1  800  553  0592 
www.wdpi.com 

Email:  cisco5  @  wdpi.com 


Nortel 

3Com 


Do  you  offer  Training 
or  Educational  Sendees? 

If  so,  call  Enku  today  to  find  out  how  to 
place  your  listing  in  our  Training  Directory. 

1-800-622-1 108  ext.  6465 


ifference 


am  making 


4  “We’re  alfjhurt  and  saddened  bv  the  terrible  tragedies. 

But  it's  important  to  do  something.  To  help  out.  I’m 
going  to  donate  blood  because  I  know  it  will  help 
jK*  ,  save  lives.  I  don’t  mind  waiting  in  line  because  it’s 

-  |i|  important.  This  is  where  1  want  to  be.  With  other 

vtP  people  w  ho  want  to  help  too.” 

*  The  American  Red  Cross  is  profoundly  grateful  to  all 
blood  donors  everywhere,  every  day.  We  are  espe¬ 
cially  proud  of  vour  commitment  to  help  save  a  life 
|l  in  the  days,  weeks  and  months  ahead.  We  could  not 

save  lives  without  you. 


Please  call  1 -800-GIVE  LIFE 

to  schedule  your  lifesaving  appointment 
to  give  blood. 


American 
Red  Cross 


Together,  we  can  save  a  life 


Increase  Your  Exposure  with  NetworkWorld’s  Response  Card  Decks! 

Next  Issue  Date:  November  16,  2001  8  if 
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For  more  information 
on  advertising  in 
Network  World  s 
Marketplace  contact: 

Enku  Gubaie, 

800-622-1108  ext.  6465, 
egubaie@nww.com 
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Why  Are  We  The  Best? 


•  Nortel  Service  Contracts  •  Next-Day  Hardware 

•  Nortel  Service  Renewals  Replacement 

•  Free  Technical  Support  *  Competitive  Prices 

•  Good  As  New  Gear, 

Same  as  New  Warranty 
-  at  Better  Than  New  Prices 

Refurbished  Specials:  I 

Bay'S  tack  4SO-24T  (AL2012E14)  with  MDA  Port 

10/100/1000  BT  Autosense  Switch 

Limited  lietwne  Warranty 

Special  $995  1 

List  $2,695 

BLN- 2  Router  Base  Unit  (71000)  -  Complete 

Includes  Dual  AC  Power  Supplies  and  SRMl 

Special  $1,999 

List  $12,700  | 

BCN  Router  Base  Unit  (73000)  -  Complete 
includes  Dual  AC  Power  Supplies  and  SRML 

Special  $2,999 

List  $18,150 

ARN  8  MB  Ethernet  Router  Base  Unit  (CV 1001003) 

Other  Memory  Conhg  and  modules  avalible  Call  now  tor  pricing. 

Special  $295 

List  $1,134 

i Oort  want  used?  Try  our  low  prices  on  new!  Call  Today! 


Call  for  free  Quote! 


888-8LANWAN 

(888-852-6926)  '-no. 


National  LAN  Exchange  •  WWW.nle.com 


FIBER  OPTIC 
SOLUTIONS 


•  T1/E1  &  T3/E3  Modems 

•  RS-232/422/485  Modems  and 
Multiplexers 

•  IBM  3270  Coax,  AS/400  Twinax,  and 
RS/6000  Modems  and  Multiplexers 

•  LAN  -  Arcnet/Ethernet/Token  Ring 

•  Video/Audio/Hubs/Repeaters 

•  ISO  -  9001 

s.i.TECH 

Toll  Free  866-SITech-1 
630-761-3640,  fax  630-761-3644 

www.sitech-bitdriver.com 
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Cable  University 

(800)  537-8254 
www.CableU.net 

FREE  online  training  in  network 
cabling  installation  &  maintenance  _ 

NetworkTraining.com 

(800)  NET-SKIL 
(800)  638-7545 

Network  Analysis  &  Tool  Training 
Certified  NetAnalyst  Testing 


BNETSYS  Inc. 

(800)  BNETSYS 
www.bnetsys.com 
Instructor  led  &  online  Cisco 
certification  training  @  no  charge 

To  Place  Your 
Listing  Here 
Call  Enku  Gubaie 
at  1-800-622-1108 


•  Contact  these  companies 
IS  today  to  help  you  with  your 
training  needs! 


Monitor 
PC  Users 

See  multiple 
computer  screens  in 
real  time  with  the 
award-winning 
NetOp  Remote 
Control. 

Try  it  free!  Neto’h 


www.CrossTecCorp.com 


Tel:  408.727.1122 
Fax:  408.727.8002 

343  1  DE  LA  CRUZ  BLVD. 
WWW. RECURRENT  .COM 


Get  More  for  Today's  Budget! 

Contact  BIZI 
to  SAVE  up  to  80% 

•  50-80%  Savings  off  Retail  List  Prices 

•  1 20-Day  Warranty 

•  100%  30  Day-Money  Back  Guarantee 

•  Large  Inventory,  Same  day  Shipping 

•  Supplying  Quality  Networking  Products 
for  Over  10  Years  with  In-House  Technical  Support 

Request  a  Quote  on-line  at: 

http://www.bizint.com  or  info@bizint.com 

(877)  438-2494 

or  (315)  458-9606  fax:  (315)  458-9493 


We  Buy,  Sell,  Trade  and  Lease... 


Your  global  partners  in  new  &  quality 
pre-owned  networking  equipment 


CISCO,  BAY/NORTEL,  3COM,  CABLETRON,  EXTREME,  FORE/MARCONI 


t  CISCO 

New  &  Used  * 

Fully  Guaranteed  s. haWa  E.p.m,i  ■■■■■ 

Overnight  Delivery  w* sprochen  oeutscn  ■■■■■ 

800.451.3407 

90  Castilian  Drive,  Suite  110.  Santa  Barbara.  CA  93117 

Routers 
Switches 
Interface  Modules 
Access  Servers 
Accessories 

www.n€tworkhardware.com 

BUY  ONLINE 


171 


GTWORK  HARDWARE  RESALE 


Systems/Features/Memory 

Cl 


Also  Available:  wellfleet,  Bay,  Fore, 
Xylogics,  Livingston,  &  Ascend 

In  Stock  •  Fast  Delivery  •  No  Expedite  Charges 


COMSTAR,  INC. 

The  #1  Network  Remarketer 

612*835*5502 

Fax  612»835*1927  E-Mall:sales@comstarinc.com 


renew 


technologies,  inc. 


everythin 


Refurbished 


r- 


•  NETBuilder 


_ 


^  *  P at h Builder  P 


MTMnetwicT 

"Your  Netoutk  Technology  Source' 


Toll  Free:  877-868-6638 
www.MTMnet.com 
sales@MTMnet.com 


VISA 


IMMEDIATE  AVAILABILITY 


Save  big  on  new/used:  ►  Routers  ►  Gigabit/FE/ATM  Switches 
►Access Servers  ►Optical  Networking  ►Wireless  BUY/SELL/RENT 


>  CISCO  ►  Juniper  ►  Lucent  ►  Nortel 

►  www.  digitalwarehouse.  com  >  Foundry 

DIGITAL  WAMHOUSI  .  Exfreme 


Your  Information  Superhighway  Discount  Sources 


►  Marconi 

►  Adtran 

►  Quick  Eagle 


Netfost  Communications  Inc.,  56-29  56th  Drive ,  Maspeth ,  NY  1 1378  USA 
Phone :  1-888-892-4726  or  718-894-7500  Fax:  718-894- 1573 

Network  World  '»  200  I 


Network  Products  and  Services  with  Network  World's 
Marketplace.  Call  800-622-1108  ext.  6507 


Premier 


Enclosures 

Add  plexi  front  doors,  fixed  or  sliding 
shelves,  keyboard  shelves  and  more. 
Get  the  quick  turn-around  solution 
for  all  your  datacomm  and  telecom¬ 
munications  housing  requirements. 


■  Standard  19  and  24 
inch  widths -multiple 
heights  and  depth 

■  Slotted  top  accepts 
cooling  fan 

■  Louvered  rear  door 


You'll  be  up  and  running  last. 


■  Rugged,  yet 
inexpensive 


Premier  Metal  Products  Company 


3089 


West 


Coast 


909 


829 


East 


Coast 


7  8 


993 


9200 


premiermetal 


com 


WWW 


r~ 

MU 

CO 

We  BUY/SELL  New  &  Used  LAN/V 
Connectivity  Products 

Specializing  in  CIS 

SS  TOP  DOLLAR  PAID  SS 

T3  Systems,  Inc. 

500  Cirby  Way,  Suite  D 
Roseville,  CA  95678 

(916)  784-3000 

fax:  (916)  797-7284 

wwnM.T3Systemsinc.com 


Overnight 
delivery  avertable 


Authorized  j 


Cisco  Reseller 
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IT  CAREERS 


Advertising  Supplement 

IT  Careers  in  California 


While  the  explosive  growth  in  IT  jobs  has  waned  in  California,  opportunities  remain 
wide  open  for  professionals  who  wish  to  apply  their  skills  to  some  neat  new  projects. 


Humberto  Quintanar,  vice 
president  of  professional 
services  for  Day,  an 
enterprise  content 
management  solution 
company  headquartered  in 
Newport  Beach,  CA  and 
Basel,  Switzerland,  describes 
Day's  flagship  product 
Communique  as  a  content 
unification  and  multichannel 
presentation  offering. 

"Companies  are  realizing  that  their  web 
properties  are  a  primary  information  channel,"  says 
Quintanar. They  need  to  connect  legacy  systems 
and  publish  information  quickly  while  maintaining 
corporate  standards  -  all  within  a  reduced  IT  budget 
environment." 

Day's  content  management  software  is 
Java-based. The  Swiss  company,  with  operations 
throughout  the  world,  has  a  range  of  clients,  includ¬ 
ing  Premier  Radio  Networks,  which  handles  the  talk 
radio  show  hosted  by  Rush  Limbaugh.  Quintanar 
says  the  Limbaugh  staff  changes  the  total  content  at 
the  site  on  a  daily  basis. 


Day  is  hiring  individuals  to 
support  customers  and  part¬ 
ners,  and  also  those  who  can 
develop  and  teach  classes  on 
the  implementation  of  enter¬ 
prise  content  management. 
Quintanar  searches  for  con¬ 
sultants  who  have  specific 
technical  skills  and  an  under¬ 
standing  of  business  and  the 
impact  that  content  manage¬ 
ment  can  have  in  the  strate¬ 
gic  success  of  global  business.  "We  are  an  extremely 
diverse  company,  with  people  from  around  the  world 
on  our  staff,"  adds  Quintanar.  "Day  looks  for  superior 
skill  sets  and  an  understanding  of  the  business 
issues  of  Global  2000  companies." 

Farmers  Insurance,  located  in  Los  Angeles,  adopts 
much  the  same  philosophy. The  continued  learning 
and  development  of  employees  -  through  traditional 
classroom  and  online  courses,  as  well  as  complete 
job  swapping  -  is  the  number  one  priority  in  helping 
the  company  meet  challenges. 

Farmers  has  invested  heavily  in  IT  to  enable  its 
customer  service  initiative,  known  as  HelpPoint. 


The  IT  infrastructure  helps  claims  representatives  get 
people's  lives  back  in  order,  through  a  network  of  call 
centers,  help  desk  support  for  complex  applications 
and  field  claims  adjusters  who  now  use  laptop  com¬ 
puters  to  quickly  provide  customers  with  access 
services  and  materials.  "We  want  to  address  our 
customers'  losses  in  real  time,  based  on  a  strong  IT 
structure.  We've  rolled  the  system  out  in  13  of  the  41 
states  we  serve,"  explains  Sandra  Bulgin,  strategic 
staffing  manager. 

In  addition  to  hiring  throughout  the  1,600-person 
IT  organization  at  Farmers,  Bulgin  is  hiring  leaders  - 
a  chief  technology  officer,  a  director  of  data  security 
and  a  director  of  distributed  computing.  "We  look 
within  first,  but  we  search  for  the  best  people 
everywhere.  We've  been  around  since  1928,  and  our 
CEO  started  here  as  a  claims  representative,"  says 
Bulgin.  "We  need  depth  of  technical  skill,  but  we  also 
need  individuals  who  understand  how  each  aspect 
of  technology  inter-relates,  from  direct  customers 
interface  on  Farmers.com  to  our  adjusters  working 
one-on-one  with  customers  in  the  field." 

For  more  job  opportunities  with  firms  in  California,  turn  to  the  pages 
of  ITcareers. 

•  If  you'd  like  to  take  part  in  an  upcoming  ITcareers  feature,  contact 
Janis  Crowley,  650.312.0607  or  janis_crowley@itcareers.net 

•  Produced  by  Carole  R.  Hedden 

•  Designed  by  Aldebaran  Graphic  Solutions 


COMPUTER/IT 

Internet  Applications  Developer 
•  Wireless.  Req.  a  bach  degree  in 
comp  sci,  eng  or  related  technical 
field.  &  5  yrs  of  exp  in  the  job 
offered  or  5  yrs  of  exp  in  software 
dvlpmt/programming.  Stated  exp 
must  include  3  years'  use  Java  or 
C/C++;  a  relational  database; 
dvlping  in  Windows  NT;  dvlping 
in  UNIX;  and  object  oriented 
dvlpmt.  Exp  must  also  ind  1  year 
developing  wireless  applications; 
and  the  use  of  HTML,  WML, 
Javascript,  and  a  formal  method¬ 
ology  tool  Technical  lead  resp  for 
research,  design,  dvlpmt.  testing 
and  maint  of  objed  oriented  real¬ 
time  wireless  internet  weather- 
content  comp  software  systems 
and  objed  oriented  wireless 
applications  utilizing  relational 
databases  and  formal  methodol¬ 
ogy  tools  in  a  Windows  NT  and 
UNIX  environment.  Will  provide 
tech  guidance  to  other  applxations 
developers  to  build  usability 
demos,  conduct  testing  and 
manage  report  rqrmts,  as  well  as 
developing  interactivity  through 
Java,  Javascript,  WML  and 
HTML.  40  hrs/wk.  Job  located  in 
Atlanta,  GA.  Salary  $85,000  - 
95,000/yr.  Send  resume  to  L. 
White,  Mgr  Staffing  &  Develop., 
Weather  Channel  Enterprises 
REF:  IADW,  300  Interstate  North 
Pkwy,  Atlanta,  GA  30339. 


ORACLE 

DEVELOPER 


BVRA  degree  Computer  Sciences  or 
related  &  3  or  mote  years  experience 
Must  possess  a  working  knowledge  of 
Forms  Si,  Repons  6i.  PL/SQL,  Tnggers 
&  must  haw  worked  with  Packages 
&  haw  the  ability  to  design  & 
product  Forms  &  Reports  under 
minimal  supervision  Use  of  SQL 
Navigator  helpful  Salary  $66,500 
Send  resume  to  Director  of  Human 
Resources,  Namasco  Corporation. 
5775  Glenridge  Drive,  Atlanta,  GA 
30328,  Fax  404-267-8871,  Email 
jcostaiFiiainasco.com.  EOE 


Informational  Meeting 
Regarding 

SUPPLIER  DIVERSITY 
SUBCONTRACTING 
OPPORTUNITIES 

for  the 

Los  Angeles  Department  of 
Water  and  Power’s 
Customer  Information  System 
(CIS)  Re-placement  Project 
will  be  held  on 

Wednesday,  October  17,  2001 
at  1:00  p.m.  in  the 
John  Ferraro  Building  (JFB) 
111  N.  Hope  Street 
Los  Angeles,  CA  90012 
A-Level  (Auditorium) 
Parking  available  on  a  First- 
Come  First-Serve  Basis  in  the 
Customer  Parking  Lot  #6  on 
Hope  St. 

Please  RSVP  with 
Ms.  Cherie  Lamb-Gutierrez, 
at  (213)  367-1917  or  email  to 
clambg  @  ladwp.com 
For  additional  information 
please  email  your  request  to 
jthum@ladwp.com  and 
dtorre®  ladwp.com 
AN  RFP  WILL  BE  FORTH¬ 
COMING  AT  A  LATER  DATE. 
PLEASE  CHECK 
http://www.ladwp.com/ 
purchasing/frame  index.htm 
FOR  DATE  OF  BIDDERS 
CON-FERENCE 


PPM  Implementation  Consultant 

This  position  requires  significant, 
full  lifecycle  OOAD  programming 
exp.  in  a  professional  environment 
with  a  background  in  development 
of  PDM  applications,  BOM,  and 
CM  Windchill  based  systems. 
Successful  candidates  will  be 
responsible  for  the  following: 
•Design,  development,  cus¬ 
tomization,  configuration,  deploy¬ 
ment,  and  support  of  Windchill 
systems 

•Strong  Java  (Applets/JSP/RMI) 
exp.  on  Oracle 

•HTML/XML  or  Web  App.  Dev. 
exp. 

•  ERP  or  CAD  Programming  exp. 
is  a  plus 

•Working  knowledge  of  Business 
systems  and  strong  integration 
skills 

Applicant  must  have  a  BS  in 
comp,  science  or  eng.  E-mail 
your  resume  to: 

toddb  @  lifecyclesolutions.com 
or  fax:  (480)  730-4844 


Call  your 

ITcareers  Sales  Representative 
or  Janis  Crowley. 

1-800-762-2977 


e-noi 

e-lite  companies 

e-merging  companies 

■kjjsential  companies 
rmoiis  opportunities 

itJEISE 

where  the  best  get  better 

1  800-762-2977 

Sure 

NetworkWorld, 
ComputerWorld 
AND  INFOWORLD 

Help  You  Do  A 
Better  Job. 


Computerworld  •  I  nf  o  World  •  NetworkWorld  •  October  8,  2001 
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COMPUTER  TECHNOLOGY 
CONSULTANTS-Informalion 
Technology  Firm  seeks  Consul¬ 
tants  to  design  and  implement 
software  for  the  Utility  and 
Chemical  Industry  clients  using 
the  following  technologies: 

Visual  Basic 
Visual  C++ 

SQL  Server 
Oracle 
Windows  NT 
Novell  Netware 
Java 

For  immediate  consideration, 
please  send  your  resume  (no 
calls)  to  Practical  Solutions,  Inc., 
2000  Composite  Drive,  Dayton, 
OH  45420  ATTN:  Jim  Schaller. 


Oracle  Database  Administrator: 
Dvlp  new  d/bases,  both  logical  & 
physical,  for  co's  Internet  site. 
Enhance,  maintain  &  provide 
support  for  d/bases.  Monitor  & 
tune  d/base  performance.  Ensure 
d/bases  are  backed  up  &  perform 
recovery  when  reqd.  BS  or  equiv 
in  comp  info  sci,  engg  or  related 
field.  4  yrs  exp  in  job  offd  or  as 
d/base  administrator,  systms 
administrator  or  systms  analyst. 
Exp  to  incl  d/base  admin  in  large 
Oracle  envrmts  on  UNIX  & 
Solaris  systms;  theoretical  or 
practical  knowl  of  Oracle  8x, 
SQL  Performance  Tuning  using 
Precise  SQL,  Veritas  Netbackup 
&  Veritas  Cluster  Server.  40 
Hrs/Wk,  $72,600/Yr.  Must  have 
proof  of  legal  auth  to  work  in  US. 
Send  your  resume  to  IA  Work¬ 
force  Center,  215  Watson  Powell 
Jr.  Way,  Des  Moines,  IA  50309- 
1727.  Please  refer  to  JO 
IA1 101471.  Employer  paid  ad. 


Computer  Programmer/Analyst 
needed  by  a  computer  Firm 
in  Glenview,  IL.  Must  have  a 
Bachelor's  degree  in  Computer 
Science/Chemical  Engineering 
with  2  yrs.  exp.  in  the  QA 
methodology  and  Mercury  auto¬ 
mated  tools  for  Mainframe/UNIX/ 
Web.  Respond  to:  Alec  Smoliak, 
Job  Code#99,  Systegration,  Inc., 
4208  Commercial  Way,  Glenview, 
IL  60025. 


Talent  is 
the  fuel  of 
the  new 
economy. 

Fill  up  with 
ITcareers. 


1 1  careers  and 
IT  careers.com  can 
put  your  message 
in  front  of  2/3  of 
ail  US  IT  profes¬ 
sionals.  If  you 
want  to  make 
hires,  make  your 
way  into  our 
pages.  Call  Janis 
Crowlev  at 
1-800-762-2977 

ITcareers 

where  the  best 

get  better 


Silicus  Technologies  Inc. 

www.silicus.com 

Silicus  Technologies  Inc.,  provides 
innovative  and  comprehensive 
e-business  platform  solutions,  to 
simplify  enterprise  applications. 
We  believe  in  the  value  of  a  func¬ 
tional  and  industry  matrix  and 
ensure  a  healthy  development  of 
ideas  through  the  interaction  of 
industry  knowledge  and  func¬ 
tional  expertise.  We  are  current¬ 
ly  looking  for  the  following: 

Software  Engineers: 

To  Architect,  research,  analyze, 
design,  and  develop  Data  Man¬ 
agement  and  Data  warehousing 
using  Object  Relational  Mapping, 
Metadata  Repository  manage¬ 
ment,  Conceptual/Logical/Physical 
data  modeling  for  implementa¬ 
tion. 

Should  have  working  knowledge 
of  upcoming  Microsoft  web  tech¬ 
nologies.  Develop  Object  models 
and  web  services  for  web  based 
CRM  solutions  and  Content 
Management  Solutions.  Need 
Masters  degree  in  Computer 
Science  or  related  and  2+  year 
of  experience. 

System  Analyst: 

To  plan,  develop,  test,  and 
document  web  technologies  and 
Java  technologies  for  technology 
assisted  web  sales  and  B2C 
solutions.  Should  have  working 
knowledge  of  upcoming  Microsoft 
web  technologies.  Use  functional 
knowledge  in  Enterprise  Resource 
Planning  modules  for  technical 
administration.  Integrate  Enter¬ 
prise  Application  for  business 
Object  Repositories.  Need 
Bachelors  degree  in  Computer 
Science  or  related  and  2+  year 
of  experience. 

Send  your  resume  to:  Ms.  Diana 
Jett,  HR  Manager,  8203  Willow 
Place  S  Dr.  Ste.  520,  Houston, 
TX,  77070 


Sr.  Technical  Specialist:  Design, 
develop  &  implement  LAN,  MAN 
&  WAN  in  UNIX  &  Windows 
environments;  configure  Cisco 
and  Ascend  Routers  for  LAN, 
MAN  (using  wireless  technology) 
&  WAN;  design,  develop  & 
implement  Internet  Access, 
Intranets,  Firewall,  Domain 
Name  Services  (Linux  based) 
&  Internet  Mail  relay,  Remote 
Access  Services  (ISDN  dial-up 
&  Virtual  Private  Networking), 
in  a  LAN,  MAN,  &  WAN  data 
communications  environment; 
monitor  systems  &  networks 
using  UNIX  Scripting  Languages; 
build  data  communications  for 
EDI. 

Bachelor’s  degree  in  Computer 
Science  required.  3  years  expe¬ 
rience  in  the  position  or  3  years 
as  Network/Systems  Adminis¬ 
trator  &/or  Consultant  required. 
Experience  in  related  occupation 
must  include  design,  development 
&  implementation  of  LAN,  MAN 
&  WAN  in  UNIX  &  Windows 
environments. 

40  hrs./wk;  8:00  a.m.-5:00  p.m.; 
$90, 828/year.  Must  have  proof 
of  legal  authority  to  work  perma¬ 
nently  in  the  U.S. 

Send  2  copies  of  both  resume 
and  cover  letter  to  Illinois 
Department  of  Employment 
Security,  401  South  State  Street 
-  7  North,  Chicago,  Illinois 
60605.  Attention:  Sheila  Lindsey, 
Reference  #  V-IL-26709-L.  NO 
CALLS.  AN  EMPLOYER  PAID 
AD.  SEND  2  COPIES  OF  BOTH 
RESUME  &  COVER  LETTER. 


DATABASE  ADMINISTRATOR/ 


CONSULTANT  sought  by  soft¬ 
ware  consulting  firm  in  Houston, 
TX.  Must  have  B.S.  in  Computer 
Science,  plus  4  yrs.  exp.  Re¬ 
spond  by  resume  to:  Ms  J.  Eng, 
Y/L,  K&W  Software  Services, 
Inc.,  11222  Richmond  Ave.,  Ste. 
246,  Houston,  TX  77082. 


PROGRAMMER  ANALYST  for 
a  computer  consulting  firm  in 
Lansdale,  PA.  Responsibilities 
incl.  System  Analysis  design, 
development  implementation,  cl. 
interface  and  documentation  of 
various  business  applications. 
Lay  out  test  plans  &  carry  out 
system  tests.  Implement  systems 
in  production.  Develop  data  con¬ 
version  utilities  for  databases 
involved.  Develop  any  other  pro¬ 
grams  as  requ'd.  All  of  the  above 
done  using  SQA  Test  Tester, 
WinRunner,  VisualBasic,  Oracle, 
Cshell  scripts,  MF-Cobol  on 
NT/Unix  operating  systems.  Need 
MS  degree  in  Comp.  Sci.  or  a  BS 
in  Comp.  Sci.  with  5/yrs  progres¬ 
sive  exp.  in  job  offered  or  as 
computer  programmer.  40  hrs/ 
wk„  Mon.-Fri.,  9am-5pm.  salary 
$70,900/yr.  Must  have  proof  of 
legal  authority  to  work  in  US. 
Send  resume  in  duplicate  to:  Job 
Order  No.  WEB1 99252,  The 
Phila.  Job  Bank,  444N.  3rd  St.  - 
3rd  FI.,  Phila.,  PA  19123 


SAP  CONSULTANT 

Responsible  for  provid.  tech, 
support  to  users  of  the  co.'s  SAP 
computer  sys.  Spec,  duties  incl.: 
(i)  planning,  dvlpg.,  testing,  im¬ 
plementing  &  documenting  bus. 
dsgn.  solutions;  (ii)  config.  & 
enhancing  the  co.'s  comp,  sys.; 
(iii)  eval.  users’  requests  for  new 
&  mod.  sys.  config.;  (iv)  visiting 
the  co.'s  sites  to  analyze  & 
evaluate  spec.  bus.  practices  & 
needs;  (v)  min.  funct.  gaps  & 
max.  software  utilization  by  the 
co.'s  bus.  units;  &  (vi)  providing 
training  &  tech,  support  to  users 
of  SAP  software  sys.  B.S.  degree 
in  Comp.  Sci.,  Physics,  Math, 
Bus.  or  Engrg.  plus  2  yrs.  of  exp. 
in  the  position  offered  or  as  a 
Software  Engr.  or  Sys.  Analyst 
rqd.  Must  know  SAP/R3  pro¬ 
gramming  lang.  High  mobility 
prfd.  40  hrs/wk,  8:30  am  -  5  pm., 
OT  as  rqd.  $80,520/yr.  Qualified 
applicants  report/submit  resume 
to:  Manager,  Beaver  County 
Team  PA  CareerLink,  2103  Ninth 
Avenue.  Beaver  Falls,  PA  15010- 
3957.  Refer  to  Job  Order  No. 
WEB200542. 


Senior  Software  Engineer 

Design,  develop,  integrate  &  test 
enterprise  server  software. 
Design  &  implement  system 
software.  Design  &  develop 
client/server  applications  using 
advanced  C/C++,  perl,  Java, 
Visual  Basic  programming  lan¬ 
guages.  Use  development  tools 
such  as  gdb,  CVS,  gcc,  Clear 
Case,  sed,  awk,  Shell  Scripting. 
Design  &  implement  databases 
using  Sybase.  Develop  database 
applications  using  SQL,  perl  &  C. 
Perform  UNIX  administration, 
database  administration  &  net¬ 
work  security.  Develop  dynamic 
web-based  applications  in  perl, 
C,  DHTML  &  XML.  Must  have 
MS  in  CS  &  1  yr  exp  designing  & 
developing  enterprise  server 
system  software.  Job  location  in 
Nashua,  NH.  If  interested, 
please  send  two  copies  of 
resume  to:  Job  Order  #2001- 
975,  PO  Box  989,  Concord,  NH 
03302-0989 


Programmer/Analyst:  Lotus  Notes/ 
Domino  full  life  cycle  development, 
R5,  including  Domino.Doc,  Lotus 
Script,  SQL,  Java,  XML  &  JSP, 
@  Formula  &  Enterprise  Solution 
builder.  Req:  BS  in  comp  sci,  engg 
or  a  related  field  &  tech,  knowledge 
of  Lotus  Notes  &  Domino  R5.  Req. 
BS  or  equiv.  in  comp,  sci,  engg.  or 
related  field.  Resumes  to:  N. 
Vuppula,  Software  Services 
Resources,  3574  Old  Milton  Pkwy, 
Alpharetta,  GA  30005 


Since  its  founding  in  1927,  Schlumberger  has  grown  into  a  $9.6 
billion  company  employing  65,000  people  in  over  100  countries  & 
serving  customers  in  the  oil,  electronics,  aerospace.  &  utilities 
industries  worldwide.  Schlumberger  Technology  Corp,  APC  currently 
has  openings  in  our  Austin,  TX  office  for: 

Software  Engineer  -  Maintain,  devlp.  &  improve  current  product 
line  based  on  Java  Virtual  Machine,  utilizing  Java.  C/C++,  Visual 
Basic,  &  Assembler.  Devlp  &  deliver  secure  java  card  embedded 
verifier.  Provide  internal  technology  expertise  support  on  banking 
products  in  Company's  Cyberflex  smart  card  product  line.  Coordinate 
smart  card  projects  with  inf  1  affiliates.  MS  Computer  Science/ 
Electrical/Electronics  Engineering  w/coursework  &/or  exp.  in 
quantum  optics  &  semiconductor  chips  used  in  smart  card  products. 

Software  Engineer  LSI  -  Devlp  &  deliver  quality  products  in 
Company's  Cyberflex  Access  smart  card  product  line.  Participate  in 
all  aspectsof  project  from  technical  assessment  of  mkt'g  requirements, 
acceptance  of  mkt’g  requirements,  definition  of  project  plans,  dsgn 
implementation,  validation,  &  maintenance  utilizing  expertise  in 
embedded  s/ware  &  programming  skills  in  C/C++,  Visual  Basic. 
Assembler,  &  Java.  MS  Engineering  w/min.  2  yrs  exp.  as  Software 
Engineer  with  embedded  s/ware  development. 

Senior  Engineer  -  Assist  in  providing  new/improved  techniques 
to  develop  GeoFrame  Product.  Provide  technical  support  to  clients 
&  other  engineers  utilizing  Unix/NT  Window/lrix  operating  sys, 
Arcview  3.2  GIS  with  Avenue  &  Oracle  database  interface  with  C/ 
C++  &  Java  on  SUN  workstations.  Test  &  dsgn  test  procedures.  MS 
Geophysical  Sciences  w/Data  Mgmt.  focus. 

Personalization  Project  Manager  -  Direct  team  in  charge 
of  developing  &  designing  embedded  personalization  &  smart  card 
personalization  s/ware,  smart  card  applications  s/ware  &  mgmt  sys 
utilizing  C/C++,  Visual  Basic,  Assembler,  &  Java.  Implement  security 
mgmt  sys  utilizing  cryptography  &  secured  devices.  Devlp  quality 
assurance  for  personalization  dept.  Deploy  generic  personalization 
tools  developed  in  Company’s  overseas  offices.  MS  Electronics 
Engineering/Computer  Science  &  2  yrs  exp.  as  a  Software  Engineer 
developing  embedded  smart  card  personalization  software  & 
cryptographic  security  mgmt  s/ware. 

Please  send  resumes  to:  Email:  personnel@austm.oilfield.slb.com; 
mail:  Schlumberger,  Attn:  Personnel,  PO  Box  200015,  Austin, 
Texas  78720-0015;  or  fax:  512-331-3204.  See  our  Schlumberger 
website:  http://www.slb.com/.  Equal  Opportunity  Employer 
M/F/D/V 


Engineers/Consultants/ 
Programmer/Analysts  needed 
for  Sugar  Land,  TX  based  soft¬ 
ware  company.  Several  senior 
and  mid-level  positions  available 
for  qualified  candidates  possess¬ 
ing  MS/BS  or  equivalent  and/or 
relevant  work  experience.  Work 
with  2  of  the  following:  Reoplesoft, 
Onyx,  ERR,  and  Oracle.  Must  be 
willing  to  travel  and  relocate  as 
required.  Submit  resume  to: 
Neosoft  Technologies,  Attn.  HR, 
6322  Walston  Bend  Dr.,  Sugar 
Land,  TX  77479. 


"PROGRESS  SOFTWARE 
CORP.  and  its  subsidiary 
NUSPHERE  CORPORATION 
are  seeking  qualified  software 
professionals  to  fill  a  number  of 
positions  (from  entry  level  to 
experienced  and  managerial 
positions)  throughout  the  United 
States: 

_  Software  Engineers 
_  QA  Engineers 

_  Consulting  Software  Engineers/ 
Analysts 

_  Programmer/Analysts 
_  Systems  Engineers 
_  Technical  Support  Engineers/ 
Analysts 

_  Technical  Support  Managers 
_  Unix  Systems  Administrators 
_  Product  Manager 

Must  have  appropriate  educa¬ 
tional  training  and  knowledge 
of  relevant  technologies.  Salary 
commensurate  with  qualifications. 
Standard  benefits. 

Interested  applicants  should 
submit  resume  to  Holly  Chestnut, 
Employment  Coordinator, 
Progress  Software  Corp.  1 4  Oak 
Park,  Bedford,  MA  01730 
Equal  Opportunity  Employer" 


Programmer  Analyst,  Software 
Engineers  and  Database  Analysts 
Various  client  server  and 
RDBMs  Technologies  including 
Reporting  and  Logistics  analysts 
and  OOPS  analysts  Variable 
locations  in  Dallas/Fortworth 
and  Houston  metro  areas. 
Contact:  Praveen  Panchakaria 
Prudent  Technologies  &  Con¬ 
sulting  Inc.  10940  Meadowglen 
Lane  #475  Houston,  TX  77042 


SYSTEMS  ANALYST:  Respon¬ 
sible  for  systems  development  & 
production  support.  Work  expe¬ 
rience  in  the  following  Informa¬ 
tion  Technologies:  Mainframe 
Based  Applications,  DB2,  IMS, 
COBOL,  FORTRAN,  RPG  ,  SAS, 
JCL,  VSAM  organization,  analysis, 
design  &  structured  programming 
methodology.  All  modules  of 
Financial  Control  Systems 
mainly  w/  Cost  Allocation,  Rec¬ 
onciliation  &  Billing  modules. 
Practical  knowledge  of  Accounts 
Payable  Systems  using  modules 
of  Purchase  Orders,  Inventory  & 
Checks.  Experience  redesigning 
&  programming  General  Ledger 
applications  from  Mainframe  to 
PC  using  FOXBASE.  Ability  to 
work  on  all  phases  of  application 
development  from  gathering  & 
analyzing  user  requests  up  to 
deploy  in  production.  Min.  4  yrs 
exp.  in  job  offered.  Competitive 
salary,  F/T,  Mon-Fri  (may  require 
evening  &  weekends),  must  be 
willing  to  travel  &  relocated  as 
necessary,  position  available  in 
Atlanta,  GA.  No  calls,  mail 
resumes  w /  ref.  #070  to  Monica 
de  los  Rios  at  Softtek:  2900 
University  Drive,  Coral  Springs, 
FL  33065 


Programmer  Analyst.  Sought  by 
Englewood  Colorado  consulting 
company  to  work  in  various 
unanticipated  locations  through¬ 
out  the  U.S.  Analyze,  plan, 
develop,  test,  and  document 
computer  programs  including 
network  communication  programs. 
Evaluate  user  requests  and 
software  programs  for  new  and 
modified  programs.  Write  program 
specifications,  code,  test,  and 
debug  computer  programs.  Cus¬ 
tomize  hardware  and  software  to 
client  needs.  Use  of  CICS,  MVS, 
COBOL,  JCL.  TSO  and  SAP. 
Reqs.  Bachelors  in  Computer 
Science,  Computer  Engineering 
or  related  field  of  study.  Plus  2 
years  in  the  job  offered  or  2 
years  in  a  related  occupation 
such  as  a  Programmer  or  Tech¬ 
nical  Developer.  Will  accept 
three  years  of  college  education 
and  three  years  of  experience  in 
lieu  of  required  education  and 
experience.  $58, 000/year,  40/hrs / 
wk,  8AM-5PM. 

Respond  by  resume  to  Colorado 
Department  of  Labor  &  Employ¬ 
ment,  Employment  Programs, 
ATTN:  Jim  Shimada,  Two 
Park  Central,  Suite  400,  1515 
Arapahoe  St.,  Denver,  CO 
80202  and  refer  to  Job  Order  No. 
CO  5005812. 


SYSTEMS  ANALYST:  Respon¬ 
sible  for  gathering  &  analyzing 
user  requirements  to  automate 
processing  or  to  improve  existing 
computer  systems.  Using 
knowledge  of  hardware,  software, 
programming  languages  &  oper¬ 
ating  systems  including  knowl¬ 
edge  of  Cobol,  MVS.  JCL,  VSAM, 
CICS,  experience  developing  & 
testing  financial  applications 
(control  of  financial  operations, 
dispersion  and  concentration  of 
funds,  Checks,  migration  and 
ATM's).  Ability  to  implement  and 
follow  QA  methodologies.  Ability 
to  gather  requirements,  plan, 
implement,  test  &  troubleshoot 
system  software;  ability  to  train 
users  during  implementation 
phase.  Min.  of  2  years  exp.  in  job 
offered.  Willing  to  travel  &  relo¬ 
cated  as  needed,  competitive 
salary,  F/T  job,  Mon  -  Fri  (may 
require  evening  &  weekends), 
position  available  in  Bellevue, 
WA  No  calls,  mail  resumes  w/  ref 
#050  att:  Monica  de  los  Rios  at 
Softtek:  2900  University  Drive, 
Coral  Springs,  FL  33065 


SYSTEMS  ANALYST/ASIC 
DESIGNER/CAD  ENGINEER: 
Analyses  user  requirements, 
procedures,  and  problems  to 
automate  proceessing  or  to  up¬ 
grade  existing  computer  system. 
Bachelors's  degree  in  Computer 
Science,  Engineering  or  math 
related  and  2  years  of  experi¬ 
ences  in  job  offered  required. 
Includes  in  those  2  years  must 
have  2  years  experience  with  C, 
C++  programming  languages, 
Should  be  able  to  do  RTL  coding, 
timing  analysis,  formal  verifica¬ 
tion,  ATPG,  internal  scan,  spice 
simulations,  package  designing 
for  a  chip  and  2  years  experience 
with  UNIX,  MSDOS  and  Windows 
95/98/NT  operating  systems. 
Must  be  able  to  travel,  $71,760/ 
year.  Apply  by  resume  only  to 
Immigration  Coordinator,  HRD, 
Time  To  Market,  Inc.,  4010 
Moorpark  Avenue,  Suite  #205, 
San  Jose,  CA  95117 


INFORMATION  SYSTEMS 
MANAGER  -  CONTRA  COSTA 
COUNTY  (CA)  FIRE  PROTEC¬ 
TION  DISTRICT-  Salary  range 
$68,592  -  $83,376.  New  position 
which  reports  to  the  Fire  Chief 
and  will  plan  and  manage  the 
District's  overall  information 
systems.  Desire  equivalent  of  a 
relevant  BA/BS  and  4  years  exp. 
managing  complex  information 
systems.  See  www.dmgmaximus. 
com/recruit.  Apply  by  10/26/01  to 
MAXIMUS,  FAX  to  (31 0)  475-8007, 
or  e-mail  searchla@maximus. 
com.  EEO 
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SYNAPSE  GROUP.  INC.,  a 
leading  computerized  magazine 
marketing  company,  is  looking  to 
tiire  qualified  candidates  for  the 
following  positions: 

Software  Engineer  to  design, 
develop  and  test  various  com¬ 
puter  software  systems  including 
a  network  reliability  computer 
program  for  predicting  and  eval¬ 
uating  the  reliability  of  electrical 
power  systems  Review  computer 
system  capabilities  &  electrical 
power  simulation  methods,  plan 
and  prepare  technical  reports/ 
instruction  manuals,  and  main¬ 
tain  existing  systems  and  add 
enhancement  features.  At  mini¬ 
mum,  Bachelors  degree  in 
Computer  Science,  Information 
Systems.  Electrical/  Electronic 
Engineering,  or  it’s  equivalent 
plus  two  years  of  experience  in 
the  job  offered  required.  Sound 
knowledge  in  transient  stability 
modeling  methods,  sparse 
matrix  solutions,  power  system 
reliability  calculations,  C++,  MFC 
and  object  oriented  databases 
preferred. 

Computer  Programmer  to  plan, 
develop,  test,  document  and 
update  computer  programs. 
Design  and  code  computer  pro¬ 
grams  for  web  site  development, 
evaluate  user  requirements,  pre¬ 
pare  flow  charts  and  diagrams 
and  convert  project  specifica¬ 
tions.  At  minimum,  Bachelors 
degree  in  Computer  Engineering, 
Information  Systems  or  it’s 
equivalent  with  two  plus  years  of 
software  development  experi¬ 
ence  required.  Knowledge  in 
Java,  JavaScript,  HTML,  Unix, 
SQL,  XSLT,  COBOL,  Windows 
NT,  Web  Development,  Access 
and  Oracle  database  preferred. 
Oracle  Database  Administrator 
to  setup,  maintain,  support  and 
upgrade  all  Oracle  databases 
and  applications.  Provide  coun¬ 
seling  on  selection  of  database 
administration  tools  for  all  Oracle 
databases  within  the  company 
and  provide  technical  advice  for 
the  implementation  of  standard 
and  common  processes  for  the 
Financial  and  Logistics  depart¬ 
ments.  Strong  background  in 
computer  programming,  rela¬ 
tional  databases,  and  business 
required  to  understand  business 
problems  and  implement  new 
systems  into  several  multifunc¬ 
tional  tiers  that  handle  data 
processing  and  databases.  At 
minimum.  Bachelors  degree  in 
Information  Systems,  Business 
Administration  or  it's  equivalent 
plus  two  years  of  experience  in 
the  job  offered  required.  Exten¬ 
sive  knowledge  in  Oracle,  VB¬ 
Script,  SQL,  DOS,  dbase,  Unix 
and  MS-Windows  preferred. 
Financial  Planning  Manager  to 
review  and  evaluate  profitability 
and  effectiveness  of  company's 
marketing  programs,  develop 
financial  and  business  models 
for  existing  and  targeted  client 
sales,  and  implement  financial 
planning  solutions.  At  minimum, 
Bachelors  degree  in  Economics, 
Finance  or  Business  and  two 
years  of  experience  in  the  job 
offered  required.  Strong  PC  skills 
and  knowledge  of  SPSS  pack¬ 
age  preferred. 

The  company  offers  a  competi¬ 
tive  compensation/benefit  pack¬ 
age  and  an  environment  where 
achievements  are  recognized  & 
professional  growth  is  encour¬ 
aged.  Qualified  applicants  are 
encouraged  to  mail  resumes  to: 
HR  Department,  Synapse  Group, 
Inc.,  Four  High  Ridge  Park, 
Stamford.  CT  06905-1325. 


Sys  Engg  wanted  by  NJ  based 
for  Iocs,  throughout  US.  Must 
have  Master's  degree  in  Elec¬ 
tronics,  Electrical  Engg.  exp.  in 
Comp  S/W  or  H/W,  Telecom  S/W 
or  H/W  developing,  testing  or 
consulting.  Respond  to:  HR 
Dept,  UTStarcom,  lnc„  33  Wood 
Avenue  (South),  Iselin.  NJ 
08830  (Ret:  GG7910IM). 


IT  OPPORTUNITIES 

Pitney  Bowes  is  a  $4.4  billion 
Fortune  500  global  provider  of 
informed  mail  and  messaging 
systems.  We  offer  you  the  finan¬ 
cial  rewards,  creative  work,  mar¬ 
ketplace  leadership,  product 
excellence  and  a  learning  career 
that  leverages  your  "know  how" 
in  our  offices  in  Shelton  and 
Danbury.  Connecticut. 

We  have  a  variety  of  opportunities 
for  Software  Engineers  with 
varying  levels  of  experience  with 
knowledge  of  one  or  more  of  the 
following: 

•  OO  design: 

•  Development  of  real-time 
embedded  applications  using 
high-level  languages  and/or  of 
32-bit  Windows  95/NT  client 
and  Windows  NT  server  based 
multi-threaded  and  multi-tiered 
client/server  applications  using 
one  or  more  of  the  following: 
VB,  Active  X,  Visual  C++,  Java, 
digital  logic  design,  MFC,  SDK, 
COM/DCOM/ATL,  COM/OLE, 
MTS,  ODBC,  ASP,  ADO  Oracle, 
third  party  tools  and  memory 
leak  utilities; 

•  Intel,  Motorola  or  equivalent 
microprocessor/microcontroller 
architecture  and  associated 
assembly  language; 

•  Software  test  automation/ 
debugging  tools  and  techniques 
(i.e.,  WinRunner  and  Norton 
Ghost); 

•  Use  case  analysis; 

•  Formal  modeling  techniques, 
including  UML; 

•  Hardware  emulation  equipment 
and  data  communication  analy¬ 
sis  tools; 

•  Development  of  internet  appli¬ 
cations  in  Windows  NT  using 
VB  and  C/C++  and  script  lan¬ 
guages.  as  well  as  HTML,  ASP, 
IIS,  MTS,  COM+,  MSMQ  script 
languages  and  COM/DCOM; 

•  Real  time  systems  specific 
hatley  and  phirbhai  decompo¬ 
sition  techniques. 

All  candidates  must  have  a  BS  is 
Computer  Science/Engineering 
or  a  related  area  or  its  equivalent. 

If  you  are  interested  in  exploring 
the  many  opportunities  offered 
by  Pitney  Bowes,  please  send 
your  resume  with  salary  require¬ 
ments  to  Robbin  Drew-Elliott, 
Pitney  Bowes,  One  Elmcroft 
Road,  Stamford,  CT  06926- 
0700.  Resume  and/or  cover 
letter  should  reflect  any  skill 
mentioned  above  that  you  pos¬ 
sess,  as  well  as  reference  code 
SE  or  it  will  be  rejected. 


Software  Applications  Developer, 
40-hour  week,  9am  -  5pm, 
$16.83  per  hour.  Job  located  in 
Miami,  FI.  Bachelor  of  Science/ 
Computer  Engineering.  Will  de¬ 
velop  Internet  bankingsoftware 
applications:  analyze,  program, 
test,  document,  implement  and 
evaluate  applications;  formulate 
plan  outlining  steps  required  to 
develop  application;  analyze 
specifications  and  requirements; 
test,  modify  or  enhance  applica¬ 
tion  software;  analyze,  review, 
and  alter  applications;  monitor 
performance  of  application  after 
implementation;  review  completed 
projects.  Submit  resume  to: 
Bureau  of  Workforce  Program 
Support,  PO  Box  10869, 
Tallahassee,  FI  32302,  Re:  Job 
Order  No.  FL2211416 


Information  Technology  Officer. 
Will  lead  development  and 
implementation  of  information 
systems,  including  global  projects 
tor  operating  systems  standards 
and  migrations  and  validation  of 
computer  controlled  laboratory 
equipment  and  measurement 
systems  to  follow  FDA  standards. 
Minimum:  Bachelor's  degree. 
CIS/  related  field,  and  1  year 
experience  in  job  offered  or  5 
years  experience,  IT/Systems 
Analyst.  Applicants  with  any 
suitable  combination  of  educa¬ 
tion,  training  or  experience  are 
acceptable  respond  by  sending 
resume  only,  in  duplicate,  to: 
Director  of  HR,  Lonza  Biologies 
Inc  ,  101  International  Drive, 
Portsmouth,  NH  03801 


Systems  Consultant 

royalblue  financial  corporation  is 
a  leading  supplier  of  global  trading 
software.  Employing  in  excess  of 
500  staff  and  with  offices  in  New 
York,  London,  Frankfurt  and 
Tokyo,  royalblue  has  developed 
the  fidessa  trading  platform  to 
provide  the  most  complete  range 
of  applications  available  for  trad¬ 
ing  cash  equities  across  the 
world's  markets.  While  royalblue 
has  a  heritage  of  18  years  in 
Europe  it  has  only  been  in  the 
USA  since  July  1996  and  as 
such  is  still  in  its  infancy  with  a 
tremendous  growth  opportunity. 

The  following  are  the  main 
responsibilities: 

•  Specialist  in  fidessa  infrastruc¬ 
ture  software  providing  advice 
and  guidance  to  project  teams 
and  support  staff 

•  Development  of  fidessa  server 
configuration  files 

•  Development  of  Back-Office  in¬ 
terfaces 

•  Train  new  staff  on  fidessa  infra¬ 
structure  software. 

The  specific  prerequisite  skills 
required  are  the  following: 

•  Extensive  knowledge  of  the  US 
equity  markets 

•  Programming  in  C++.TCL,  and 
UNIX  scripting 

•  Familiarity  with  the  UNIX  Oper¬ 
ating  System 

•Knowledge  of  the  industry 
standard  FIX  and  CMS  inter¬ 
face  formats. 

Apply  to:  royalblue  Financial 
Corp.,  17  State  Street,  New 
York,  NY  10004.  Attn:  Human 
Resources  (SC) 


SENIOR  SYSTEMS  ANALYST , 
Manhattan,  NY  -you  will  analyze 
user  requirements,  procedures 
and  problems  to  automate 
processing  or  to  improve  existing 
computer  system.  Using  COBOL, 
C  and  C++ ,  ProC,  analyze  current 
operational  procedures,  identify 
problems,  and  review  specific 
input  and  output  requirements. 
Maintain  the  existing  system  to 
increase  its  functionality.  Study 
and  analyze  new  requirements, 
and  using  Oracle  perform  limited 
programming, support  a  user 
base  and  create  reports  for 
users  on  demand.  Coordinate 
application  development  process 
and  provide  system  demonstra¬ 
tion  to  prospective  users  of  the 
system.  Analyze  corporate  oper¬ 
ating  systems,  such  as  UNIX, 
MS  WIN  and  others,  review  com¬ 
puter  system  capabilities,  work- 
flow,  and  scheduling  limitations 
to  determine  if  requested  program 
or  program  change  is  possible 
within  existing  system.  Analyze 
existing  information  processing 
systems.  Required  two  years  of 
experience  in  the  .job,  40  hours 
per  week,  from  9:00  a.m.  to  5:00 
p.m.,  salary  $1 10,000  per  year, 
please  send  resume  or  letter 
describing  qualifications  in 
duplicate  to  RAF  #117,  Post 
Office  Box  703,  New  York,  NY 
10014-0703. 


Lead  Tekno-Functional  Applica¬ 
tion  Architect,  Malden,  MA 

Will  lead  Functional/Technical 
Consultants  &  participate  in 
analysis/design/development/ 
implement  Worldwide  Multi¬ 
dimensional  Systems  environ¬ 
ment  on  a  UNIX/Orade  Database 
Platform  over  150+  Gigabyte 
databases;  oversee  &  contribute 
to  all  technical  design  aspects  of 
database;  perform  data  analysis, 
logical  &  physical  design  of  data¬ 
bases,  data  validation  &  physical 
implementation;  provide  overall 
direction  to  programming  staff. 
Requ:  B.Sc.  +  5  yrs  Oracle  exp 
OR  M  Sc.  in  computer  engineer¬ 
ing;  knowledge  of  Unix,  C,  C++, 
Oracle  &  other  relational  data¬ 
bases  such  as  Sybase.  Informix. 
Please  send  resume  &  proof 
of  authorization  to  work  perma¬ 
nently  in  US  to:  Rec  Brains  LLC, 
252  Kennedy  Drive  #302, 
Malden,  MA  02148 


SOFTWARE  ENGINEERS  (10 
positions):  require  Bachelor's  in 
Engineering/Computer  Science/ 
Mathematics/Science  or  closely 
related  major  with  two  years 
experience  providing  skills  in 
described  duties,  at  $70,000  per 
year;  Senior  Software  Engineers 
(8  positions)  with  Master's 
and  two  years  experience,  at 
$75,000  per  year.  Provide  on-site 
consulting  in  design,  analysis, 
analysis  and  development  of 
software  application  in  Oracle, 
DB2,  SQL  Server  and  Sybase; 
e-commerce  and  web  applica¬ 
tions  development  in  Microsoft, 
Java  and  related  technologies; 
network  management  systems 
development  with  Netscape 
Server  and  related  tools;  SAP 
R/3  applications  on  Windows 
with  DOS  and  ABAP/4  and 
related  modules.  40%  travel  to 
client  sites  in  the  United  States. 
Mail  resumes  to:  YASH  Tech¬ 
nologies,  Inc.,  2100  Parklake 
Drive,  NE,  Suite  F,  Atlanta,  GA 
30345-2167. 


Computer  Professionals  with 

experience  in  one  or  more  of  the 

following: 

•  Oracle,  PL/SQL,  Forms.  Reports, 
VB,  Developer  2000 

•  Powerhouse,  Quiz,  QTP,  C, 
Pascal,  JCL,  Allbase,  Turbolm- 
age,  Unix,  MPE. 

•  ORACLE  DBAs 

•  Delphi,  UML,  SQL  Server, 
Windows 

•  Web  Admins  -  iPlanet,  Firewalls 

•  Solaris/Sun  OS  Sys.  Admins  - 
Sun  Unix  Servers 

•  NT  Admins  -  Firewalls,  Weblogic 

•  Java,  Swing,  CORBA,  EJB 

•  Fixed  Income  Analysts 

Forward  your  resume  to: 

Dept  H,  Quantronix,  Inc,  2969 

Whimey  Ave,  Hamden,  CT 

06518. 
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F/T  Software  Engineer.  Provide 
technical  support  to  departmental 
personnel  &  perform  maintenance 
&  modifications  on  programs 
currently  in  production.  Design  & 
write  specifications  for  complex 
computer  programs,  all  levels  of 
logic  flow  charts,  preparation  of 
test  data  &  debugging  programs 
using  Oracle,  C++  &  Unix.  De¬ 
velop  &  maintain  applications,  real¬ 
time  transactions  &  subordinates 
&/or  batch  programs  working  w/ 
ECL/ERP  applications,  ASP,  MS 
Access,  VB  5.0  &  6.0,  MS  SQL, 
SQL  server,  Java,  AS/400  DB2  & 
AS/400  RPG.  Must  have  Bache¬ 
lor's  degree  in  CS,  Computer 
Applications  or  related  field. 
Foreign  degree  equivalent  accept¬ 
ed.  Must  have  3  yrs.  of  exp.  in  job 
offered  or  position  w/  same  duties. 
Salary:  $67,050.  Send  resume 
to  Jose  Carbia,  Ref.  #  AD/CWD/ 
1025HS,  SITA  INC,  3100  Cum¬ 
berland  Blvd.,  Ste.  200,  Atl.  GA 
30339  or  jobs  @  sitacareers.com 


SYSTEMS  ANALYST:  responsible 
for  gathering  &  analyzing  user 
requirements  to  automate  process¬ 
es  or  to  improve  existing  com¬ 
puter  systems  including  ALTAMI RA 
Banking  Software,  Check  Clear¬ 
inghouse  Banking  Application, 
OLAP  Information  Banking  Sys¬ 
tem  for  the  accountability  of  each 
client,  Accounting  Banking 
Application  using  CA-IDEAL, 
RPG-IV,  COBOL.  ASSEMBLER 
programming  Languages  with 
CICS,  VS  AM  files.  DB2.  CA-DATA 
DOM/DB,  &  EIS-Express  For 
MVS/TSO/ISPF  &  OS/400 

Operating  systems.  Willing  to 
travel  &  relocate  as  needed,  mtn. 
of  4  years  experience  in  job 
offered,  competitive  salary,  F/T 
job,  Mon  -  Fri  (May  require 
evening  and  weekends),  position 
available  in  Coral  Springs,  FL. 
No  calls,  mail  resumes  w/  ref  #030 
Monica  de  los  Rios  at  Softtek: 
2900  University  Drive,  Coral 
Springs.  FL  33065 


Software  Engineer:  Implement 
code  per  approved  software 
design  specifications  using  C. 
MC68XXX  Assembly  Language 
and  Object  Oriented  design  for 
C++;  test  and  debug  embedded 
software  under  real-time  operating 
system,  Ethernet/TCP/IP,  RS485 
and  other  networks,  and  multi¬ 
tasking  environment  using  cross 
development  systems,  debugging 
monitors,  logic  analyzers,  micro¬ 
processor  emulators  and  network 
sniffers;  recommend  embedded 
software  designs  to  senior  and 
principal  engineers.  Requires 
MSCS  or  MSEE  plus  2  yrs  exp. 
or  BSCS  or  BSEE  plus  5  years 
progressive  exp;  Apply  to: 
Human  Resources,  Andover 
Controls  Corp.,  300  Brickstone 
Square,  Andover,  MA  01810. 


Seeking  Software  Developers, 
responsible  for:  design,  develop¬ 
ment  &  coding  of  transaction 
processing  systems;  develop 
conversion  specifications  into 
sequence  detailed  instruction; 
analysis  &  documentation  of 
SRS  for  user;  develop  &  direct 
SW  system  testing  procedures. 
BA/BS  (foreign  equivalent 
accepted)  PLUS  5  yrs  exp.  in  job 
offered  or  5  yrs  exp.  in  rel.  job. 
Req.  exp:  VB,  Powerbuilder, 
C/UNIX,  and  Oracle.  Also  seek¬ 
ing  Database  Administrators, 
responsible  for:  design,  coding, 
implementation  &  maintenance 
of  relational  DB  tools  &  servers 
applying  knowledge  of  Oracle 
DB  admin;  document  &  code  DB 
descriptions  &  specify  identifiers. 
Master’s  degree  in  CS.  MIS  or  IT 
(foreign  equiv.  accepted)  PLUS 
3  yrs  exp.  in  job  offered  or  related 
occ.  (OR  BA/BS  PLUS  5  yrs  exp. 
in  job  offered  or  related  occ.  in 
lieu  of  MS  plus  3  yrs  exp.)  Req. 
exp:  Oracle  DB  Admin,  Unix  & 
Sun/Solaris.  Salary  Neg.  FT  & 
standard  company  benefits. 
EEO.  Please  send  resume  to 
Leslie  Karg,  Director  Dir.  of  Em¬ 
ployee  Resources,  Paymentech, 
Inc.,  4  Northeastern  Blvd.,  Salem, 
NH  03079. 


Cambria  Consulting,  Inc.,  a 
management  consulting  firm, 
has  an  opening  in  our  office  in 
Boston,  MA  for  a  Programmer/ 
Analyst.  Interested  candidates 
should  send  resume  to  Andrea 
Keenan,  Office  Manager,  Cambria 
Consulting,  Inc.,  One  Bowdoin 
Sq.,  Boston,  MA  021 14  No  calls 
please. 


Software  Engineer.  Design  and 
develop  client  server  based 
software  applications  in  multiple 
platforms  and  environments. 
Design  and  develop  applications 
using  C++,  Visual  C++,  MFC, 
Java,  SQL  Server,  JDBC.  COM. 
Windows  NT.  Demonstrated 
ability  desinging  and  developing 
applications  using  Java.  JDBC. 
Visual  C++.  Demonstrated  ability 
designing  and  developing  appli¬ 
cations  using  SQL  Server,  MTS, 
MSMQ,  MFC.  $85.363/yr.  40 
hr/wk.  Must  have  M.S.  in  Comp. 
Sci.,  eng.  rel.  field/equiv.  and  1 
year  exp.  Send  2  resumes:  Case 
#20014756,  Labor  Exchange 
Office,  19  Staniford  Street,  1st  fl„ 
Boston,  MA  02114. 


Software  Engineer  wanted  by 


3-D  imaging  co.  in  Rochester, 


NY.  Must  have  a  Bachelor's 


Degree  in  Computer  Science  + 


2  yrs  of  exp.  Respond  to  HR 


Dept.,  Dimension  Technologies. 


Inc.  315  Mt.  Read  Blvd., 


Rochester,  NY  14611. 


Mgr,  Application  Connector 
Development.  Use  knowledge 
of  messaging  technology,  AMTrix 
Architecture,  EDI  &  Datacom- 
munications  to  develop  &  main¬ 
tain  Application  Connectors  on 
Amtrix  platforms  to  provide  tech 
connectivity,  functional  collabo¬ 
ration  solutions,  &  communica¬ 
tions  capability  Req.  BS  in  engg 
field  &  5  yrs  exp  as  sys  analyst, 
programmer  or  engg.  Resumes 
to:  D  Hull,  Viewlocity,  3475 
Piedmont  Rd,  Ste  1700,  Atlanta, 
GA  30305 


Softek  International,  Inc.  has 
openings  for  Software  Engineers, 
Programmer  Analysts,  and  Sys¬ 
tems  Analysts  with  at  least  two 
years  experience.  Job  Duties: 
Analyze,  design,  develop,  test, 
integrate,  and  implement  complex 
web  based  software  applications 
and  distributed  database  man¬ 
agement  systems  using  skills 
such  as  Oracle,  Unix,  Visual 
Basic,  HTML,  and  Java,  on 
Windows  platform.  Some  posi¬ 
tions  also  require  a  Bachelor's 
degree,  and  some  Masters. 
Excellent  Pay  and  Benefits  Mail 
resume  to  HR  Dept.,  Softek 
International,  Inc.,  1301  Mindy 
Lane,  Piscataway,  New  Jersey 
08854. 


Software  Engineer:  Design  & 
development  of  test  software  for 
microwave  &  control  measurement 
instrumentation  components  & 
integrated  systems  using  Visual 
C++  &  Visual  Basic  on  NT  &  XP 
platforms.  Req.  BS  degree  in 
Engg  or  Computer  Science. 
Resumes  to:  I  Prather,  Microwave 
Instrumentation  Technologies, 
4500  River  Green  Pkwy.,  Ste 
200,  Duluth,  GA  30096-2580. 


Online  lottery  systems  company 
requires  Consulting  Engineer  to 
provide  technical  decisions  for 
product  development,  design 
software  architecture  for  new 
products,  perform  lead  role 
in  development  effort,  and 
perform  technical  assessment  of 
products  and/or  technologies  for 
“buy  vs  buikf  decisions.  Requires 
3  years  experience  responsible 
for  Java  technologies-based 
product  design  and  development. 
B.S.  in  Computer  Science  or 
related  field.  Send  resume  to 
Edna  Dennis,  Benefits  Analyst. 
GTECH  Corporation,  55  Tech¬ 
nology  Way,  West  Greenwich,  Rl 
02817.  EOE. 
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1-800-762-2977 
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Internet:  dgentile,  gvela@nww.com 
(512)  249-2200/FAX:  (512)  249-2202 


Northern  California 

Sandra  Kupiec,  Associate  Publisher,  Western  Region 

Miles  Dennison,  Regional  Sales  Manager 

Sean  Weglage,  Senior  District  Manager 

Carmela  Baglione,  Account  Executive 

Luisa  Luk,  Account  Executive 

Cathy  Song,  Account  Executive 

Tina  Barnes,  Sales  Operations  Manager 

Celina  Esquivias,  Sales  Assistant 

Internet:  skupiec,  mdennison,  sweglage,  cbaglione,  lluk, 

csong,  tbarnes,  cesquivias@nww.com 

(650)  577-2700/FAX:  (650)  341-6183 

Northwest/Rockies 

Karen  Wilde,  Regional  Sales  Manager 
Lara  Greenberg,  Regional  Sales  Manager 
Kim  Gaffrey,  District  Manager 
Internet:  kwilde,  Igreenberg,  kgaffrey  @nww.com 
(650)  577-2700/FAX:  (650)  341-6183 

Southwest 

Becky  Bogart  Randell,  District  Manager 
Angela  Norton,  Sales  Assistant 
Internet:  brandell,  anorton@nww.com 
(949)  250-3006/FAX:  (949)  833-2857 


Southeast 

Don  Seay,  Regional  Sales  Manager 
Internet:  dseay@nww.com 
(404)  845-2886/FAX:  (404)  250-1646 


Custom  Publishing 

Shaun  Budka,  Custom  Media  Solutions  Manager 
Internet:  sbudka@nww.com 
(508)  460-3333/FAX:  (508)  460-1237 

Fusion 

James  Kalbach,  Director,  of  Online  Sales 
Jeff  Schwartz,  Online  Account  Manager 
Stephanie  Gutierrez,  Online  Account  Manager 
Debbie  Lovell,  Online  Account  Manager 
Kristin  Baker,  Online  Operations  Manager 
Internet:  jkalbach,  jmschwartz, 
sgutierrez,  dlovell,  kbaker@nww.com 
(610)  341-6025/FAX:  (610)  971-0557 


MARKETPLACE 

Response  Card  Decks/MarketPlace 


Richard  Black,  Director  of  Marketplace 
Karima  Zannotti,  Senior  Account  Manager 
Enku  Gubaie,  Senior  Account  Manager 
Cara  Peters,  Account  Manager 
Amie  Gaston,  Account  Manager 
Sharon  Stearns,  Sr.  Media  Dev.  A  Operations  Mgr. 
Chris  Gibney,  Sales  Operations  Coordinator 
Internet:  rblack,  kzannott,  egubaie,  cpeters, 
agaston,  ssteams,  cgibney@nww.com 
(508)  460-3333/FAX:  (508)  460-1192 


IT  CAREERS 

VP/General  Manager,  Janis  Crowley,  East  Regional  Manager, 
Deanne  Holzer,  Midwest  Regional  Manager,  Laura  Wilkinson, 
Western  Regional  Manager,  Donna  Dugo,  Western  Account 
Manager,  Whitney  Nagy,  Marketing  Director,  Kelli  Flanagan, 
Operations  Manager,  Donna  Kent,  Advertising  Coordinator, 
Leilani  Lopez,  Advertising  Coordinator,  Carla  Amaral.  Marketing 
Specialist,  HeidiTanakatsubo,  Sales  Support, Tina  Silvetra, 
Sales  Support,  Nikki  Wilson(800)  762-2977/FAX:  (650)  286-2770 
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continued  from  page  1 

survey  The  survey  lists  116  seed- 
and  first-round  deals  in  the  sec¬ 
ond  quarter,  down  80%  from  the 
peak  in  the  first  quarter  of  2000.  At 
$688  million, the  total  financing  in 
the  spring  of  this  year  was  one- 
tenth  the  amount  spent  in  early 
2000  (see  chart,  right). 

Acquisitions  of  start-ups  are 
also  down.  For  example,  Cisco 
—  which  gained  a  reputation 
for  acquiring  innovation  rather 
than  developing  it  in-house  — 
bought  just  one  company  in  the 
first  half  of  this  year,  compared 
with  more  than  20  last  year.  And 
IPOs  have  plummeted  in  the 
technology  sector,  from  more 
than  300  in  each  of  the  last  two 
years  to  just  10  in  the  first  half 
this  year,  according  to  the  Web 
site  IPO  Monitor. 

For  corporate  buyers,  this  trend 
means  start-ups  will  take  longer 
to  deliver  products  because  they 
will  have  less  money  to  spend  on 
people-intensive  development 
efforts.  However,  start-ups  that  de¬ 
liver  products  should  be  healthier 
because  venture  capitalists  are 
doing  more  due  diligence  before 
making  investments. 

“You  will  see  stronger  business¬ 
es  because  companies  won’t  get 
funding  unless  they  have  a  com¬ 
pelling  business  plan  and  a  rev¬ 
enue  model  that  shows  they  can 
make  it,”  says  Tracy  Lefteroff,  glob¬ 
al  managing  partner  of  the  ven- 

Patent  pattern 

A  key  measurement  of 
innovation  is  the  num¬ 
ber  of  patents  filed  each 
year.  For  the  tele¬ 
communications  class, 
the  projected  increase 
in  patent  filings  for  2001 
is  11%  —  which  is  a 
smaller  increase  than 
in  recent  years,  but  still 
healthy  growth. 


Year-to-year  increase 


*  Projected 

SOURCE  US  PATENT  4  TRADEMARK  OFFICE 


ture  capital  practice  at  Price 
waterhouseCoopers. 

PricewaterhouseCoopers 
executives  say  they  won’t  worry 
about  innovation  in  the  network 
industry  unless  early-stage  in¬ 
vestments  drop  below  1997  lev¬ 
els  and  stay  there  for  more  than 
a  year. Their  overall  view  remains 
optimistic. 

“Ultimately,  the  world  is  going 
to  become  one  connected  infor¬ 
mation  society’’ Lefteroff  says.“We 
still  have  to  continue  to  build  out 
the  backbone  and  infrastructure 
for  that.” 

But  who  is  going  to  finance  de¬ 
velopment  of  this  next-genera¬ 
tion  infrastructure?  The  pressure 
is  on  larger  companies.  While 
industry  innovators  such  as 
AT&T,  Lucent  and  Telcordia 
Technologies  don’t  publish  how 
much  they  spend  on  research 
and  development,  they  all  say 
they  are  struggling  to  maintain 
their  research  budgets  in  the 
current  economy. 

Jeff  Jaffe,  vice  president  of  re¬ 
search  for  Lucent’s  Bell  Labs, 
says  that  for  the  last  two  years 
most  network  innovations 
came  from  start-ups.  Now  he 
predicts  innovation  will  come 
from  big  companies  that  can 
build  more  reliable  and  scal¬ 
able  products. 

“The  crash  and  burn  of  the  start¬ 
ups  and  the  [competitive  local 
exchange  carriers]  had  some  en¬ 
during  benefits  for  the  industry 
Jaffe  says.“It  turned  up  the  tempo 
of  innovation,  and  that’s  some¬ 
thing  that  we’ve  very  much  re 
sponded  to.” 

Jaffe  says  it  is  more  cost-effec¬ 
tive  for  companies  like  Lucent  to 
fund  their  own  research  and  de 
velopment  than  to  acquire  start¬ 
ups.  As  an  example,  he  points  to 
an  all-optical  router  that  Bell  Labs 
developed  this  year. 

“The  total  investment  in  re¬ 
search  for  the  lambda  router  was 
tens  of  millions  of  dollars,”  Jaffe 
says.“Compare  that  to  the  billion- 
dcllar  acquisitions  of  start-up 
companies  in  the  telecommuni¬ 
cations  space,  and  you  see  that 
the  internal  model  is  much  more 
efficient.” 

Lucent  has  been  a  victim  of  bil- 
lion-dollar  acquisitions  gone 
awry,  as  the  company  recently 
shut  down  Chromatis  optical 
transport  operations,  which  it  ac¬ 
quired  last  year  for  $4.5  billion. 

Despite  the  efficiency  of  in- 
house  research,  many  network 
companies  are  adjusting  their  re¬ 
search  and  development  budgets 
to  meet  reduced  revenue  targets. 

AT&T  Labs  is  focusing  its  re- 


Easy  come,  easy  go 


Venture  capital  investments  in  network  start-ups 
skyrocketed  in  1999  and  2000,  but  fell  off  sharply  after 
Q2, 2000. 
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search  dollars  on  a  few  strate¬ 
gic  areas.  This  trend  started  a 
few  years  ago,  “but  it’s  much 
more  significant  now,”  Leighton 
says.  “There’s  pretty  tight  align¬ 
ment  between  the  research  pro¬ 
gram,  the  development  pro¬ 
gram  and  the  business  units.” 

Leighton  argues  that  a  more 
focused  R&D  program  benefits 
corporate  network  executives. 
“The  problem  with  all  the  inno¬ 
vation  going  on  in  the  network 
industry  is  that  complexity  was 
going  up  exponentially,”  he  says. 
“Take  IP  VPNs,  for  example.  We 
want  to  get  to  a  single,  simple 
offering  that  is  easy  for  our 
salesforce  to  sell,  easy  for  our 
customers  to  implement,  and 
easy  to  manage.” 

AT&T  Labs  and  IBM  are  among 
the  network  companies  putting 
more  emphasis  on  patenting  in¬ 
novations  that  come  out  of  their 
labs.  Indeed,  patent  applications 
in  telecommunications  have 
continued  to  rise  in  2001, 
although  at  a  slower  pace  than 
in  the  past  (see  chart,  left). 

Maintaining  staffing  levels  is 
another  challenge  for  network 
industry  labs.  Bell  Labs  currently 
employs  16,000  people,  down 
from  27,000  a  year  ago,  although 
many  of  them  went  to  Lucent 
spinoffs.  Telcordia  Technologies 
has  conducted  layoffs  because 
fewer  service  providers  are  en¬ 
listing  the  company’s  research 
expertise. 

“[Service  providers]  have  a 
pretty  low  appetite  right  now  for 
paying  for  research,” says  Richard 
Wolff,  vice  president  for  ad¬ 
vanced  network  systems  re¬ 
search  at  Telcordia.“lt  varies  from 


technology  to  technology  but  the 
overall  trend  is  downward.” 

Telcordia  has  shifted  its  inter¬ 
nal  research  funds  to  focus 
on  the  most  promising  areas, 
such  as  wireless  and  e-com- 
merce.  Telcordia  also  plans  to 
pursue  more  government 
research  programs. 

“Government  funding  is  remark¬ 
ably  stable,”Wolff  says. 

Many  observers  predict  the  fed¬ 
eral  government  will  play  a  more 
important  role  in  funding  net¬ 
work  research  than  it  did  during 
the  dot-com  boom. 

Federal  spending  on  advanced 
network  research  is  holding 
steady  Federal  Sources,  a  market 
research  firm,  estimates  that  fed¬ 
eral  agencies  will  spend  $1.31  bil- 
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lion  on  high-performance  com¬ 
puting  and  communications  re¬ 
search  in  2002,  up  slightly  from 
$1.28  billion  this  year. 

The  Clinton  administration's 
Next  Generation  Internet  initia¬ 
tive  has  ended,  and  President 
Bush’s  IT  advisory  council  is  re¬ 
viewing  all  federal,  networking 
research  programs. 

For  now,  the  most  forward-look¬ 
ing  projects  are  coming  out  of 
the  National  Science  Found¬ 
ation  (NSF).The  NSF  awarded  a 
$53  million  grant  in  August  to 
create  the  world’s  most  powerful 
distributed  computing  facility. 
Developed  with  Qwest  Com¬ 
munications,  the  facility  will 
have  a  dedicated  optical  net¬ 
work  that  operates  at  up  to  80G 
bit/sec.  And  an  initiative  to  be 
announced  this  month  will  cre¬ 
ate  a  national  test  bed  for  evalu¬ 
ating  the  efficiency  of  next-gen¬ 
eration  middleware. 

“All  across  science,  we  are  see¬ 
ing  bigger  and  bigger  data  sets,” 
says  George  Strawn,  director  of 
NSF’s  Computer  and  Information 
Science  and  Engineering  Act¬ 
ivity.  “If  you’ve  got  big  data  sets 
and  millions  of  workstations 
around  the  world  that  want  that 
data,  that  sounds  like  a  require 
ment  for  an  advanced  network¬ 
ing  infrastructure.” 

Research  collaborations  be¬ 
tween  government,  industry  and 
academia  appear  to  be  holding 
up.  California’s  CalIT2  project, 
which  is  building  test  beds  for 
emerging  optical  and  wireless 
technologies,  launched  a  year 
ago  with  $140  million  in  industry 
pledges  over  four  years  to  match 
See  Economy,  page  81 
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SBC  rolls  out  metro  optical  service 


■  BY  MICHAEL  MARTIN 

SAN  ANTONIO,  TEXAS  —  SBC  Com¬ 
munications  last  week  rolled  out  an  opti¬ 
cal  network  service  that  provides  compa¬ 
nies  with  high-bandwidth  connections 
between  metropolitan-area  sites  for  appli¬ 
cations  such  as  data  center  mirroring  and 
storage. 

Called  Multi-Service  Optical  Networking, 
the  offering  uses  dense  wavelength  divi¬ 
sion  multiplexing  gear  from  Nortel  to  give 
customers  point-to-point  connections. 
Because  optical  networks  are  protocol 
independent,  the  service  can  support  a 
range  of  traffic  types. 

The  offering  gives  customers  another 
choice  beyond  optical  services  delivered 
by  the  likes  of  AT&T,  GiantLoop  Network, 
MFN  and  WorldCom. 

One  advantage  SBC’s  service  may  have 
over  some  competitors’  is  that  customers 
can  choose  whether  to  manage  traffic 
running  over  the  optical  connections 
themselves  or  hand  that  task  off  to  the 
carrier,  notes  Nick  Maynard,  an  analyst  at 
The  Yankee  Group. 

SBC's  service  can  provide  customers 
with  speeds  of  up  to  80G  bit/sec  for  pro¬ 
tected  traffic,  where  half  the  available 
bandwidth  is  reserved  for  a  failover  and 
160G  bit/sec  for  unprotected  traffic. 

For  customers  with  offices  in  areas  out¬ 
side  SBC  territory,  the  provider  offers  a 
data  customer  premises  equipment  ser¬ 
vice  through  which  SBC  would  manage 
any  out-of-region  optical  devices  con- 
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a  $100  million  state  grant. 

“In  spite  of  a  meltdown  in  the  stock  mar¬ 
ket  and  huge  debt  loads  among  wireless 
carriers  in  Europe,  we  have  really  seen  no 
major  backing  away  by  industry  from  its 
support  for  our  institute,”  Smarr  says. 
Among  the  industry  backers  are  Akamai, 
Compaq,  Ericsson  Wireless,  IBM,  Qual¬ 
comm  and  Sun. 

Some  observers  say  the  slowdown  in  net¬ 
work  innovation  is  caused  more  by  the 
lack  of  user  demand  for  advanced  net¬ 
works  than  by  reduced  research  and 
development  funding. 

“How  come  the  high-speed  Internet  has¬ 
n’t  burst  on  the  scene?  Because  we  need 
the  same  10-year  incubation  for  the  high¬ 
speed  Internet  as  we  had  for  the  low-speed 

Internet,” 
Strawn  says. 

Strawn  pre¬ 
dicts  it  will  be 
another  five 

years  before  corporations  develop  applica¬ 
tions  that  take  advantage  of  the  high-speed 
networks  available  todayThere  are  techni¬ 
cal  innovations  coming  out  of  the  research 
labs  ready  to  be  put  into  use,  but  you’ve  got 
to  have  the  demand  for  them,”  he  says.  ■ 


Get  more  information  online. 
DocFinder  6352 
www.mrfnsioo.CMn 


nected  via  another  provider’s  optical  month  for  a  60-month  contract,  according 
links.  to  Bob  Walters,  executive  director  of  opti- 

The  service  won’t  be  inexpensive,  cal  networking  for  SBC. 

Contracts  start  at  around  $30,000  per  The  service  will  be  available  in  October 


in  SBC’s  Southwestern  Bell  territory.  Other 
SBC  service  areas  will  be  added  in  com¬ 
ing  months. 

SBC:  www.sbc.com 


Waiting  to 
questions  could  be 
hazardous  to  your  business 


"Will  e-business  continue  to  fuel  the 
storage  crisis?” 

“ What’s  the  prognosis  for  Fibre  Channel 
based  SANs?” 


"When  should  I  consider  iSCSI? 


"Where  can  I  turn  for  storage 
management  advice?” 

“Should  storage  be  centralized 
or  distributed?” 

NEW  DATES 

STORAGE 
TOWN  MEETING: 

Building  a  Superior 
Infrastructure 

A  Network  World  Event 


BOSTON,  MA 
October  2 

CHICAGO,  IL 
October  3 

DENVER,  CO 
October  4 


SAN  JOSE,  CA 
October  10 

IRVINE,  CA 
October  1 1 

NEW  YORK,  NY 
October  30 


SAN  FRANCISCO,  CA  WASHINGTON,  D.C. 
October  9  October  31 


Get  answers  at  Network  World’s 
Storage  Town  Meeting. 

As  online  storage  demands  surge,  you  face  a  flood  of  ques¬ 
tions  about  how  to  build  an  infrastructure  strong  enough  to 
handle  the  data  streaming  into  your  enterprise. 

There’s  no  better  place  to  get  answers  than 

Network  World’s  Storage  Town  Meeting: 
Building  A  Superior  Infrastructure. 

Attend  this  FREE,  interactive,  one-day 
event  and  you’ll: 

■  Get  straightforward  answers  to  your 
hard-hitting  questions  from  storage 
experts  Steve  Duplessie,  founder 
of  Enterprise  Storage  Group  and 
Sandra  Gittlen,  events  editor  at 
Network  World. 

■  Meet  face-to-face  with  world-class 
storage  vendors  and  compare  the 
best  solutions  on  the  market. 

■  Explore  the  pros  and  cons  of  tech¬ 
nologies  such  as  SAN,  NAS,  Fibre 
Channel,  SCSI,  InfiniBand,  storage 
over  IP  and  more. 

Register  for  Network  World’s  Storage 
Town  Meeting:  Building  A  Superior 
Infrastructure.  And  get  the  answers  you 
need  now — before  your  storage  infrastruc¬ 
ture  becomes  hazardous  to  your  business. 


Register  today  at  www.networkworld.com/seminars/storage  or  call  800-643-4668. 
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To  become  a  sponsor  of  this  event,  please  contact  Andrea  D’ Amato  at  508-490-6520  or  adamato@nww.com. 
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Ants  and  privacy 


It  is  amazing  how  something  one 
values  can  be  effectively  eroded 
by  thousands  of  tiny  attacks.  For 
example,  the  current  barrage  of  ants 
at  our  house  is  wearing  down  my 
family’s  quality  of  life. 

Lest  you  think  I  exaggerate,  we  (along  with  the 
rest  of  my  town)  seem  to  be  experiencing  an  ant 
invasion  that  won’t  stop.  What  started  as  a  trickle  of 
insect  scouts  is  now  a  full-scale  invasion. 

As  an  aside,  1  have  a  theory:  Ants  have  gotten 
smarter.  When  I  was  a  kid, you’d  swat  at  a  column  of 
ants  and  they’d  march  on  with  single-minded  pur¬ 
pose.  Today,  you  swat  at  the  little  buggers  and  they 
run!  1  swear,  this  is  new  behavior  —  they  have  got  it 
figured  out  that  when  there  are  enough  of  them.no 
amount  of  swatting  can  terminate  them  all. 

Anyway  the  ants  are  driving  us  crazy  and  you  will 
not  be  surprised  to  learn  that  I  see  a  parallel  be¬ 
tween  the  depredations  of  phalanxes  of  ants  and  the 
damage  being  caused  by  the  never-ending  stream  of 
tiny  violations  of  personal  privacy  by  corporations. 

The  reason  this  matters  is  that  personal  privacy  is 
more  at  risk  than  at  any  time  in  history.  Over  and 
above  any  changes  in  our  rights  as  legislated  by 
the  government,  e-commerce  in  its  many  forms  is 
increasing  the  depth  of  what  corporations  know 


about  us  and  is  accelerating  the  rate  of  transfer  of 
our  personal  information. 

The  trouble  is  that  our  corporate  methods  and  sys¬ 
tems  for  controlling  this  flow  of  private  information 
is,  at  best,  barely  adequate  and  at  worst,  completely 
naive.  Let  me  give  you  an  example.  1  own  the  do¬ 
main  Gibbs.com.  Out  there  (in  the  real  world)  are 
many  companies  with  Gibbs  in  their  names. 

It  will  come  as  no  surprise  that  many  users  aren’t 
really  sure  what  domain  they  might  be“at.”Thus,as 
I  get  all  the  mail  that  comes  to  any  address  at 
Gibbs.com,  I  see  all  the  misaddressed  messages. 

Now,  out  there  in  the  vales  of  education  is  the 
Katharine  Gibbs  School,  which  owns  multiple 
domains  (e.g.  katharinegibbs.com,  kgibbs.com, 
kgibbsnycom,  kgibbsboston.com),  none  of  which 
is  the  one  that  many  of  its  staff  and  pupils  assume 
should  be  theirs  —  to  wit,  Gibbs.com. 

The  school  has  recently  started  accepting  elec¬ 
tronic  applications  using  the  Embark  Network,  an 
organization  that  was  recently  acquired  by  The 
Princeton  Review.  According  to  the  press  release 
on  the  Embark  Web  site, “this  acquisition  firmly 
positions  The  Princeton  Review  as  the  premier  col¬ 
lege  admissions  products  and  services  company, 
serving  more  than  1.5  million  students,  parents  and 
counselors  every  month,  working  with  more  than 


1,000  colleges  to  enhance  the  marketing  and  man¬ 
agement  of  their  admissions  process,  and  helping 
over  1,400  high  school  counselors.” 

Well  chaps.  I’m  sure  you  mean  well,  but  when  a 
student  uses  your  services  1  suggest  that  you  don’t 
send  their  account  name  and  password  to  the 
e-mail  address  they  pull  out  of  their . ..  er,  whatever 
. . .  and  then  follow  that  up  with  a  copy  of  their 
application  that  includes  their  name,  home  ad¬ 
dress,  work  history  and  Social  Security  number! 

What  1  particularly  like  about  this  is  Embark’s  pri¬ 
vacy  statement  says, “When  you  submit  an  applica¬ 
tion  through  Embark.com, you  can  be  confident 
your  information  is  safe  and  secure.”  Even  better, 
the  site  claims, “We  use  industry-standard  efforts  to 
safeguard  the  confidentiality  of  your  personal 
information, such  as  firewalls  and  Secure  Sockets 
Layers  where  appropriate,”  and  the  whole  mess  is 
stamped  with  the  trustee  seal.  What  a  joke. 

It  is  this  kind  of  sloppiness,  this  kind  of  stupid  over¬ 
sight  that,  as  part  of  an  endless  parade  of  privacy 
violations,  is  eroding  the  value  of  e-commerce. 

Next  week,  we’ll  discuss  what  you  should  be 
doing  about  this  “death  by  a  thousand  cuts”  kind  of 
problem.  Now  1  need  to  go  find  more  ant  spray. 

Private  thoughts  to  nwcolumn@gibbs.com. 
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Stuff  you  just  can’t  miss. 


Adam  Gaffin 


Stimulating  PDA  massage 

Don't  even  think  of  making  jokes  about  the  latest 
Handspring  Visor  attachment.  Well,  at  least  not  at 
work.  Raycom’s  Personal  Massager  plugs  into  your 
Handspring  and  provides  a  “stimulating  muscles 
workout  previously  only  possible  with  conventional 
electronic  muscle-stimulation  devices.”  But  wait, 
there's  more: 

“Besides  the  instruction  handbook,  pull-down  instruction  screens  and  body 
guide  provide  quick  reference  to  the  users.  Users  may  choose  from  a  tantalizing 
selection  of  massage  modes  ranging  from  soothing  squeeze,  to  stimulating  chop 
or  solid  tap  or  combination  of  massages  designed  for  the  shoulders,  back,  arms 
and  legs.”  DocFinder:  6338 

Meanwhile,  IBM  has  built  a  prototype  Bluetooth  wireless  phone  that  you  can 
wear  like  jewelry.  Designtechnica.com  reports:  “Called  Digital-Jewelry  Cell 
Phones,  this  new  technology  combines  the  look  and  feel  of  jewelry  with  the  func¬ 
tions  of  an  advanced  cell  phone." 

It  comes  in  earring,  necklace,  ring  and  bracelet  components;  each  handles  a  dif¬ 
ferent  function  —  the  ring  flashes  to  signal  an  incoming  phone  call,  which  you 
then  listen  to  via  the  earring.  DocFinder:  6339 

No,  that  isn't  a  real  photo  of  a  WTC  tourist 

Sheesh,  what  is  it  with  some  people?  A  co-worker  just  got  a  breathless  mes¬ 
sage  -  along  with  an  embedded  photo  —  of  a  tourist  on  top  of  the  World  Trade 
Center  seconds  before  the  plane  hit. 

Now  cut  that  out!  The  photo  is  bogus,  a  creation  of  somebody  with  a  wee  bit  of 
time  and  a  copy  of  Photoshop.  Read  all  about  it.  DocFinder:  6340 

Speaking  of  hoaxes,  don't  believe  for  a  second  any  e-mail  about  a  shadowy 
Klingerman  Foundation  sending  virus-laden  “gifts”  to  Americans.  It’s  just  not  true, 


reports  the  federal  National  Center  for  Infectious  Diseases: 

“If  you  receive  an  e-mail  message  about  'Klingerman  virus,’  please  do  not  for¬ 
ward  it  to  others."  DocFinder:  6341 

How  to  throw  a  LAN  party 

The  Ultimate  Guide  to  Hosting  a  LAN  Party  tells  you  everything  you  need  to 
know  to  get  your  house  (or  office?)  ready  for  an  onslaught  of  geeks  ready  to  kill 
each  other  on  the  fields  of  Quake: 

"LAN  parties  can  also  run  for  as  long  as  you  want,  though  reality  will  dictate 
that  most  events  are  three  days  or  less,  usually  running  from  Friday  evening  to 
Sunday  evening. 

For  obvious  reasons,  one-day  events  are  the  easiest  to  set  up,  and  it  is  recom¬ 
mended  that  the  first  LAN  party  you  host  be  a  one-day  party.  If  you  have  friends 
to  help  you  organize  and  host  a  party,  you  should  be  able  to  host  multiday  events 
right  off  the  bat.  Remember  to  allocate  space  for  sleeping  if  your  event  spans 
more  than  one  day  because  even  the  most  hard-core  gamer  cannot  play  for  24 
hours  straight.”  DocFinder:  6342 

How  sucky  is  your  intranet? 

It’s  the  question  posed  by  Robert  Scoble,  who  provides  a  short  quiz  to  see  just 
how  bad  your  intranet  is.  For  example: 

"Does  your  intranet  require  anyone  who  publishes  to  have  an  FTP  application? 
Rate  your  system  sucky  if  you  require  your  users  to  get  involved  with  arcane 
TCP/IP  infrastructure  models." 

Scoble  is  marketing  director  at  UserLand  Software,  which  makes  a  Web- based 
collaborative  tool  designed  to  avoid  all  the  “suckiness”  he  refers  to,  natch. 
DocFinder:  6343 

Get  your  daily  dose  of  Compendium  at  www.nwfusion.com,  DocFinder:  63 51.  Send 
your  daily  site  sightings  to  agaffin@nww.com.  And  look  for  'Net  Buzz,  returning 

soon. 


INTEGRATION: 


A  HERCULEAN  TASK. 


Reshaping  IT  infrastructures  can  he  difficult  for  mere  mortals. 


How’s  this  for  a  challenge?  Take  an  e-business  infra¬ 
structure  teeming  with  disparate  networks,  platforms, 
standards  and  applications,  and  make  them  all  work  as  one. 
Across  all  business  units.  With  suppliers,  partners  and 
customers.  Yep,  integration  is  one  colossal  test  of  strength. 

So  how  do  you  tackle  it?  You  can  start  by  ordering  our 
Software  Evaluation  Kit  for  Linux?  (It’s  yours  free  by 
simply  registering  by  phone  or  online.)  In  it  you'll  find 
an  overview  of  e-business  integration,  along  with  per¬ 
spectives  and  strategies  for  tough  integration  challenges. 
You’ll  also  get  free  trial  code  for  IBM  software  such  as 
DB2?  WebSphere?  Lotus®  and  Java™  Tools.  It’s  the  perfect 
integration  software  primer.  And  best  of  all,  everything 
in  it  also  speaks  Linux. 


As  the  fastest  growing  and  most  accessible  operating 
system,  Linux  is  an  ideal  platform  for  the  integrated 
environment.  Lor  small  business  or  corporate  behemoth. 
It’s  open,  scalable  and  hardware-agnostic. 

That’s  why  IBM  offers  the  industry’s  richest 
selection  of  code  for  Linux.  And  then  backs  it  with  IBM 
service,  support  and  consulting.  That  means  an  army  of 
integration  experts  proficient  in  everything  from 
designing  to  deploying  to  maintaining 
truly  open  and  interoperable  systems. 

To  see  how  you  can  take  on  an  inte¬ 
gration  project,  with  little  to  no  chance  of 
a  hernia,  visit  our  Web  site  or  call  today  for 
your  free  Software  Evaluation  Kit  for  Linux. 


CLICK  OR  CALL  FOR  A  FREE  IBM  SOFTWARE  EVALUATION  KIT  FOR  LINUX. 


(g°  ibm.com/e-business/soready/p4  1  800  426  7080,  ask  for  Open 


*  LEGAL  \OTE:  IBM,  Lotus,  the  e-business  logo  and  other  marks  designated  •  or  ~  are  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries  Java  and 
all  Java-based  trademarks  are  trademarks  of  Sun  Microsystems,  Inc.  in  the  United  States,  other  countries,  or  both.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others 
Unux  is  a  registered  trademark  of  Linus  Torvalds.  ©2001  IBM  Corporation.  All  rights  reserved.  Limit  one  kit  per  respondent.  Respondents  will  be  required  to  complete  a  registration  form  in  order  to 
participate  in  this  offer.  Offer  ends  12.31.01.  Offer  available  only  in  U.S. 
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SEE  US  AT  ISPCON 
Ias  VEGAS 

Booth  #2320 


Making  your  network  perform  shouldn’t  be  such  a  workout.  Extreme  Networks  delivers  a  simplified  approach  for 
building  networks  that  optimizes  application  performance  —  so  business  critical  information  gets  where  it  needs 
to  go  —  Fast!  For  more  information,  visit  our  website  or  give  us  a  call.  And  unclog  your  network  once  and  for  all. 
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www.extremenetworks.com/go/nw.htm 


1-888-257-3000,  ext.  3131  (U.S.) 


♦1  408-579-3131  (Outside  U.S.) 
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